Medium
CVE-2019-9576
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2019-25138
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
High
33727746-4481-4b7f-8d2a-100027b7d1c3
Blog Designer <=1.8.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2019-15713
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting
Critical
CVE-2019-15646
RSVPMaker <= 6.1.9 - SQL Injection
Critical
CVE-2019-11565
Print My Blog <= 1.6.6 - Server-Side Request Forgery
High
CVE-2019-11807
WooCommerce Checkout Manager <= 4.2.6 - Unauthenticated Arbitrary Media Deletion
Medium
CVE-2019-15869
JobCareer | Job Board Responsive WordPress Theme <= 2.5.1 - Stored Cross-Site Scripting
Critical
CVE-2019-25224
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
High
CVE-2019-11557
WDContactFormBuilder <= 1.0.68 - Cross-Site Request Forgery
Medium
4ac57705-24ce-44b5-95d9-972bf58e4cd1
Page Builder: KingComposer < 2.8.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-14949
WP Database Backup <= 5.1.1 - Cross-Site Scripting
Medium
CVE-2019-15870
CarSpot – Dealership Wordpress Classified Theme < 2.1.7 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2019-11223
SupportCandy – Helpdesk & Support Ticket System <= 2.0.0 - Arbitrary File Upload
High
CVE-2019-15319
Option Tree <= 2.6.0 - PHP Object Injection
Medium
CVE-2019-11843
MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter
Medium
CVE-2019-15889
WordPress Download Manager <= 2.9.93 - Cross-Site Scripting
Critical
CVE-2019-9787
WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments
High
bf70f652-5244-421c-8ee6-75719315ed64
Advanced Contact form 7 DB <= 1.6.0 - SQL Injection
Critical
CVE-2019-11886
Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Update
High
CVE-2019-10869
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
High
CVE-2019-11869
Yuzo Related Posts <= 5.12.93 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2019-10864
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting
High
CVE-2019-25215
ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.