High
CVE-2019-15769
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2015-9352
WP-Polls <= 2.71 - SQL Injection
Medium
CVE-2019-14978
WooCommerce PayU India <= 2.1.1 - Improper Input Validation
Medium
CVE-2019-14470
UserPro <= 4.9.34 - Reflected Cross-Site Scripting
High
CVE-2019-15821
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
High
CVE-2019-15770
WooCommerce Address Book < 1.6.0 - Cross-Site Request Forgery
Medium
CVE-2019-14774
Variation Swatches for WooCommerce <= 1.0.61 - Reflected Cross-Site Scripting
High
CVE-2015-9331
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
Medium
CVE-2017-18564
Sender by BestWebSoft <= 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2019-15778
Additional Variation Images Gallery for WooCommerce <= 1.1.28 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-15817
Easy Property Listings <= 3.3.3 - Cross-Site Scripting
Medium
CVE-2016-10895
Option Tree <= 2.5.5 - Cross-Site Scripting
Critical
CVE-2016-10887
All In One WP Security & Firewall <= 4.0.8 - SQL Injection
Medium
CVE-2016-10869
Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress <= 4.0.1 - Cross-Site Scripting
High
CVE-2018-20967
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery
Medium
CVE-2018-20965
Ultimate Member <= 2.0.3 - Cross Site Scripting
Medium
CVE-2018-0586
Ultimate Member <= 2.0.3 - Directory Traversal
High
CVE-2018-20964
Contact Form Email <= 1.2.65 - Cross-Site Request Forgery
High
CVE-2019-15238
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery
Critical
CVE-2019-13578
GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection
Medium
5b266a09-22f3-4ac3-a2ba-8321503200e7
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
Medium
CVE-2018-20963
Contact Form Email <= 1.2.65 - Cross-Site Scripting
High
CVE-2019-15779
Social Feed Gallery <= 2.4.7 - Cross-Site Request Forgery
Medium
CVE-2018-0585
Ultimate Member <= 1.3.88 - Cross Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.