Medium
CVE-2019-15818
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-14948
PPOM for WooCommerce <= 18.3 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-15776
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
High
CVE-2019-15781
Social LikeBox & Feed <= 2.8.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2019-14216
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery to Remote Code Execution
Critical
CVE-2019-15780
Formidable Form Builder <= 4.02 - PHP Object Injection
Critical
CVE-2019-15819
ND Restaurant Reservations <= 1.3 - Options Change
High
CVE-2019-14773
Woody Ad Snippets <= 2.2.5 - Arbitrary Post Deletion
High
CVE-2019-14679
Pricing Table Plugin - < 2.3 - Cross-Site Request Forgery
Medium
CVE-2019-15820
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update
Medium
077b3483-ab1c-401d-aa67-c4da5fca90b4
File Manager <= 4.8 - Missing Authorization on AJAX Actions
Medium
CVE-2019-15775
ND Learning <= 4.7 - Open Redirect
Critical
CVE-2019-14695
Popup Builder <= 3.44 - SQL Injection
Critical
CVE-2019-15774
ND Booking <= 2.4 - Unauthenticated Arbitrary Options Update
Medium
cf665438-20d2-4df9-b3ff-54123343a46d
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2019-15773
Travel Management <= 1.6.1 - Open Redirect
High
CVE-2019-15772
Donations < 1.4 - Unauthenticated Arbitrary Options Change
High
CVE-2019-15858
Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import
Medium
CVE-2019-15771
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update
Critical
CVE-2019-14348
JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection
Critical
CVE-2019-13635
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Medium
CVE-2019-17385
Animate It <= 2.3.5 - Cross-Site Scripting
Medium
CVE-2019-17384
Animate It <= 2.3.5 - Cross-Site Scripting
High
CVE-2019-25145
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.