Medium
CVE-2019-14785
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-14784
CP Contact Form with PayPal <= 1.3.01 - Cross-Site Scripting
High
CVE-2019-14681
Deny All Firewall <= 1.1.6 - Cross-Site Request Forgery
Medium
645552ef-84aa-4f51-93d4-cb85c43fed58
Photospace Responsive <= 1.1.7 - Cross-Site Scripting
Medium
CVE-2019-14683
Import and export users and customers <= 1.14.1.3 - Cross-Site Request Forgery leading to attachment deletion & Path Traversal
Medium
CVE-2019-14786
Rank Math SEO <= 1.0.27 - Authenticated Settings Reset via reset-cmb Parameter
Medium
CVE-2019-15327
Import and export users and customers <= 1.14.1.2 - Cross-Site Scripting
High
CVE-2019-15326
Import and export users and customers <= 1.14.2.1 - Directory Traversal
High
CVE-2019-25147
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link
Critical
CVE-2019-15839
Sina Extension for Elementor < 2.2.1 - Local File Inclusion
High
CVE-2019-5979
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery
High
d0999244-4097-4e8c-8f7e-4accd7727d69
Dropshix < 4.0.14 - Authorization Bypass
Medium
8b089114-b403-4e42-a578-c1f3b100978f
Cookieless Backend Server Tracking for Google Analytics – WordPress Plugin < 1.2.1 - Cross-Site Scripting
High
CVE-2019-15841
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery allowing Option Update
High
1ed98565-3f86-46c0-a696-13d678f2d523
Rank Math SEO <= 1.0.26 - Cross-Site Scripting
High
CVE-2019-15840
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery
Medium
edd1396b-02f6-4292-82df-76c5eeecfe20
Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes
Medium
cad5274f-0d73-425d-bdfb-478c77d55d6c
WordPress Download Manager <= 2.9.96 - Cross-Site Scripting
High
CVE-2019-10270
Ultimate Member <= 2.0.39 - Privilege Escalation
High
dae2d028-6976-468a-9e93-ec712887d657
LionScripts: IP Blocker Lite <= 10.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2019-10271
Ultimate Member <= 2.0.39 - Unauthorized Profile Modification
Medium
fc06ba09-9562-4d97-90ff-5464399feced
Real Estate Manager – Property Listing and Agent Management <= 6.8 - Cross-Site Scripting
High
CVE-2019-15660
WP-Members <= 3.2.7 - Cross-Site Request Forgery
High
CVE-2019-5974
Contest Gallery – Photo Contest Plugin for WordPress <= 10.4.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.