Medium
CVE-2019-15317
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-14798
Photo Gallery by 10Web <= 1.5.24 - Authenticated Local File Inclusion
Medium
CVE-2019-14950
WP Live Chat Support <= 8.0.27 - Unauthenticated Stored Cross-Site Scripting
High
6299876c-9db4-4f8d-897d-9a013a67238c
Register IPs <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting
Medium
d0c0562f-1f3b-4630-bbc5-4ea2985d71d1
Ultimate Member <= 2.0.45 - Low-Privileged Stored Cross-Site Scripting
Critical
618f644b-a92c-4f7f-aaea-c03ee7d6e0f9
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read
Medium
CVE-2019-14797
Photo Gallery by 10Web <= 1.5.22 - Authenticated Cross-Site Scripting
Medium
4890ec6f-ba73-48bd-8dd7-f896d6b4a140
Ultimate Member <= 2.0.45 - Admin+ Stored Cross-Site Scripting
High
CVE-2019-10866
Form Maker by 10Web <= 1.13.2 - Authenticated SQL Injection
Medium
CVE-2019-15643
Ultimate Faqs <= 1.8.21 - Cross-Site Scripting
Critical
CVE-2019-9880
WPGraphQL <= 0.2.3 - Information Exposure
Critical
CVE-2019-9879
WPGraphQL <= 0.2.3 - Administrative User Creation
Medium
CVE-2019-9881
WPGraphQL <= 0.2.3 - Unauthenticated Comment Creation
Medium
CVE-2019-11871
Custom Field Suite <= 2.5.14 - Authenticated Cross-Site Scripting
High
CVE-2020-13764
Gravityforms <= 2.4.8 - Information Exposure
High
CVE-2018-19456
WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure
Medium
d20eb274-e578-445f-95f4-5e677d9ad7f3
W3 Total Cache plugin <= 0.9.7.3 - Reflected Cross-Site Scripting
Critical
CVE-2019-12240
Virim <= 0.4 - PHP Object Injection
Medium
b002d1a1-a536-4865-b263-594390941ed4
W3 Total Cache <= 0.9.7.3 - Improper Input Validation via openssl_verify
Critical
CVE-2019-12241
Carts Guru <= 1.4.5 - PHP Object Injection
Critical
CVE-2019-11185
WP Live Chat Support Pro <= 8.0.26 - Arbitrary File Upload
Medium
54044fd7-facf-4ac2-8c87-e30db78eba40
Travel Booking WordPress Theme < 2.7.8.4 - Cross-Site Scripting
Medium
d4f28285-bfa3-4063-bc8b-303db72d0156
Timely All-in-One Events Calendar <= 2.5.38 - Cross-Site Scripting
High
f4c3f9c5-5086-416b-a601-2890f52547c0
Advanced Woo Search <= 1.68 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.