Medium
CVE-2019-15817
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2016-10895
Option Tree <= 2.5.5 - Cross-Site Scripting
Critical
CVE-2016-10887
All In One WP Security & Firewall <= 4.0.8 - SQL Injection
Medium
CVE-2016-10869
Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress <= 4.0.1 - Cross-Site Scripting
High
CVE-2018-20967
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery
Medium
CVE-2018-20965
Ultimate Member <= 2.0.3 - Cross Site Scripting
Medium
CVE-2018-0586
Ultimate Member <= 2.0.3 - Directory Traversal
High
CVE-2018-20964
Contact Form Email <= 1.2.65 - Cross-Site Request Forgery
High
CVE-2019-15238
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery
Critical
CVE-2019-13578
GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection
Medium
5b266a09-22f3-4ac3-a2ba-8321503200e7
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
Medium
CVE-2018-20963
Contact Form Email <= 1.2.65 - Cross-Site Scripting
High
CVE-2019-15779
Social Feed Gallery <= 2.4.7 - Cross-Site Request Forgery
Medium
CVE-2018-0585
Ultimate Member <= 1.3.88 - Cross Site Scripting
Medium
CVE-2019-15818
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes
Medium
CVE-2019-14948
PPOM for WooCommerce <= 18.3 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-15776
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
High
CVE-2019-15781
Social LikeBox & Feed <= 2.8.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2019-14216
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery to Remote Code Execution
Critical
CVE-2019-15780
Formidable Form Builder <= 4.02 - PHP Object Injection
Critical
CVE-2019-15819
ND Restaurant Reservations <= 1.3 - Options Change
High
CVE-2019-14773
Woody Ad Snippets <= 2.2.5 - Arbitrary Post Deletion
High
CVE-2019-14679
Pricing Table Plugin - < 2.3 - Cross-Site Request Forgery
Medium
CVE-2019-15820
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.