Medium
68d71bd0-176c-4eee-99c2-9b591d6f70d3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2019-16223
WordPress Core < 5.2.3 - Authenticated Cross-Site Scripting via Post Previews
Medium
CVE-2019-16220
WordPress Core < 5.2.3 - Open Redirect
Medium
CVE-2019-16222
WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments via URLs
Medium
CVE-2019-16221
WordPress Core < 5.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2019-16217
WordPress Core < 5.2.3 - Cross-Site Scripting via Media Uploads
Medium
CVE-2019-16332
API Bearer Auth < 20190907 - Cross-Site Scripting
Medium
9bc832fa-9845-4157-b7a6-54d8c3794085
Spryng Payments for WooCommerce <= 1.6.7 - Cross-Site Scripting
Medium
15d66474-e215-4d28-b6fb-259c90053212
Portrait-Archiv.com Photostore < 3.2 - Reflected Cross-Site Scripting
High
CVE-2019-16120
Event Tickets <= 4.10.7.1 - CSV Injection
Medium
CVE-2019-1010124
WooCommerce Product Feed for Google, Facebook, eBay and Many More <= 3.1.14 - Reflected Cross-Site Scripting
High
CVE-2019-15816
WP Private Content Plus <= 1.31 - Unauthenticated Settings Change
Critical
CVE-2019-14314
NextGEN Gallery <= 3.2.10 - SQL Injection
Medium
CVE-2019-15777
WP DSGVO Tools (GDPR) <= 2.2.18 - Cross-Site Scripting
High
CVE-2019-15769
HandL UTM Grabber / Tracker <= 2.6.4 - Cross-Site Request Forgery
Critical
CVE-2015-9352
WP-Polls <= 2.71 - SQL Injection
Medium
CVE-2019-14978
WooCommerce PayU India <= 2.1.1 - Improper Input Validation
Medium
CVE-2019-14470
UserPro <= 4.9.34 - Reflected Cross-Site Scripting
High
CVE-2019-15821
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
High
CVE-2019-15770
WooCommerce Address Book < 1.6.0 - Cross-Site Request Forgery
Medium
CVE-2019-14774
Variation Swatches for WooCommerce <= 1.0.61 - Reflected Cross-Site Scripting
High
CVE-2015-9331
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
Medium
CVE-2017-18564
Sender by BestWebSoft <= 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2019-15778
Additional Variation Images Gallery for WooCommerce <= 1.1.28 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.