Medium
CVE-2019-13478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2019-13413
Rencontre – Dating Site <= 3.1.2 - SQL Injection
Medium
d1040d5b-e02d-4762-825f-409c8770c66f
Zoner - Real Estate <= 4.1 - Cross-Site Scripting
Medium
CVE-2019-13414
Rencontre – Dating Site <= 3.1.2 - Cross-Site Scripting
Medium
CVE-2019-14792
WP Google Maps <= 7.11.34 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
ede6c4d1-e4bd-44c0-a66a-fffc0e1b22f6
Gallery Photoblocks <= 1.1.40 - Reflected Cross-Site Scripting
Medium
CVE-2019-13344
WP Like Button <= 1.6.0 - Missing Authorization
Medium
CVE-2019-14791
Appointment Booking Calendar < 1.3.19 - Cross-Site Scripting
High
f85a0394-cd70-419d-97bd-c75d6f721714
MyBookTable Bookstore <= 3.2.2 - Reflected Cross-Site Scripting
Medium
ed866cda-2244-4172-a8bd-63005bbee4fc
Feed Them Gallery <= 1.1.8 - Cross-Site Scripting
Critical
CVE-2019-15659
Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments < 3.1.2 - SQL Injection
High
CVE-2019-15832
Visitor Traffic Real Time Statistics <= 1.13 - Cross-Site Request Forgery
High
CVE-2019-16250
Ocean Extra <= 1.5.7 - Unauthenticated Options update and CSS injection
Medium
CVE-2019-15833
Simple Mail Address Encoder < 1.7 - Reflected Cross-Site Scripting
High
CVE-2019-15831
Visitor Traffic Real Time Statistics <= 1.12 - Cross-Site Request Forgery
High
2edb574d-74b7-4f72-91a1-bb6632709b7a
WooCommerce <= 3.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-15648
Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal
High
162a194c-a7de-44c4-a659-8188e303b6a2
WooCommerce <= 3.6.4 - Missing File Type Validation
High
CVE-2019-12570
Server Status by Hostname/IP <= 4.6 - SQL Injection
Medium
CVE-2019-14787
Newsletters <= 4.6.18 - Cross-Site Scripting via contentarea Parameter
High
CVE-2019-12826
Widget Logic < 5.10.2 - Cross-Site Request Forgery
Critical
CVE-2019-13275
WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection
Critical
CVE-2019-15318
Easy Forms for Mailchimp <= 6.5.2 - Code Injection
High
69f861bf-933f-4413-a5c0-fd39ee78e594
WP Statistics <= 12.6.6.1 - Unauthenticated Stored Cross-Site Scripting via IP Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.