Medium
CVE-2020-20626
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-17671
WordPress Core < 5.2.4 - Authorization Bypass
Medium
CVE-2019-17674
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting via Customizer
High
CVE-2019-17574
Popup-Maker <= 1.8.12 - Unauthenticated information disclosure
Medium
CVE-2019-17207
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
High
CVE-2019-17673
WordPress Core < 5.2.4 - Cache Poisoning
Medium
CVE-2019-17675
WordPress Core < 5.2.4 - Type Confusion
High
CVE-2019-16902
ARforms <= 3.7.1 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2019-17071
Client Dash <= 2.2.0 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2019-17072
Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table <= 1.3.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2019-17070
LIQUID SPEECH BALLOON < 1.0.7 - Cross-Site Scripting
Critical
6fb01045-d38f-469f-8aaf-ff8882132acc
iThemes Sync <= 2.0.17 - Authentication Bypass
Medium
5a9c5f98-3457-443c-a87d-64f9c26b4f79
SoundPress Plugin <= 2.2.0 - Stored Cross-Site Scripting
High
CVE-2019-25214
ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2019-17239
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2017-14760
Event Espresso Free/Lite <= 3.1.37.12.L - Unauthenticated SQL Injection
High
98286172-99b0-43d6-9876-972e270aa19f
Theme Editor <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2019-16931
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting
Critical
CVE-2019-16932
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery
High
CVE-2019-20360
GiveWP <= 2.5.4 - Authorization Bypass
Medium
CVE-2019-25314
Duplicate Post <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2019-16524
Easy Fancybox <= 1.8.17 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-25216
Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting
Medium
CVE-2019-25742
Zoner - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.