High
CVE-2019-14328
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-14327
Custom Simple RSS < 2.0.7 - Cross-Site Request Forgery
High
CVE-2019-17386
Animate It <= 2.3.5 - Cross-Site Request Forgery
Critical
CVE-2019-14313
Photo Gallery by 10Web <= 1.5.30 - SQL Injection
Critical
CVE-2019-13572
Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection
Medium
59cefa5d-f270-48e1-bb3e-98f710a055d8
Contact Form 7 Dynamic Text Extension < 2.0.3 - Reflected Cross-Site Scripting
Medium
fb147a5d-65ad-4304-b13a-670f11398e63
WPS Cleaner <= 1.4.4 - Missing Authorization Checks
Medium
CVE-2019-15823
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'action=confirmaction'
Medium
CVE-2019-15826
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via Referer Header
High
b3f75424-b9f3-42ee-a96c-ff0ed30cbd2f
WPS Limit Login < 1.4.6.1 - Cross-Site Request Forgery
High
8ddc4593-bdb4-4b01-be28-4317c76ae6b0
WPS Bidouille <= 1.12.2 - Multiple Cross-Site Request Forgery
Medium
8bd04a52-ed59-4305-831e-646ab5801d36
WPS Cleaner <= 1.4.4 - Arbitrary Media File Disclosure
Critical
5e0ce0dc-34eb-4577-82a5-8ed822847ff4
WPS Limit Login < 1.4.6.1 - Authorization Bypass via IP Spoofing
Medium
CVE-2019-15825
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'action=rp'
Critical
CVE-2019-15822
WPS Child Theme Generator < 1.2 - Directory Traversal
High
28dfc8c9-478c-48b2-8781-7e0787fd50fd
WPS Limit Login < 1.4.6.1 - Stored Cross-Site Scripting
Medium
CVE-2019-15824
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'adminhash'
Medium
CVE-2019-14945
Ultimate Member <= 2.0.53 - Cross-Site Scripting
Critical
CVE-2019-13569
Email Subscribers & Newsletters <= 4.1.7 - SQL Injection
Critical
CVE-2019-14231
Viral Quiz Maker - OnionBuzz < 1.2.2 - SQL Injection
Critical
CVE-2019-14230
OnionBuzz Plugin < 1.2.7 - SQL Injection
Medium
4ed50ad7-a31b-488e-85fc-ff521488f62a
Real Estate 7 WordPress Theme < 2.9.1 - Stored Cross-Site Scripting
High
CVE-2019-14205
Adaptive Images for WordPress <= 0.6.66 - Local File Inclusion
High
CVE-2019-12934
WP Code Highlight.js <= 0.6.2 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.