Critical
CVE-2019-25217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-15328
Import and export users and customers <= 1.14.0.2 - Cross-Site Scripting
Critical
ce834ae1-e05a-4b0e-9d7f-144669437d70
Caldera Forms Pro < 1.8.2 - Missing Authorization
Critical
CVE-2019-9618
GraceMedia Media Player <= 1.0 - Local File Inclusion
Critical
CVE-2018-12426
WP Live Chat Support Pro <= 8.0.06 - Remote Code Execution via unrestricted file upload
High
CVE-2019-25152
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
Medium
CVE-2019-18834
WooCommerce Subscriptions < 2.6.3 - Stored Cross-Site Scripting
High
7b4f63af-cb43-4287-8fdd-0ff1df70c6d6
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2019-9575
Quiz And Survey Master <= 6.2.1 - Cross-Site Scripting
High
1c307340-2911-46b9-9c90-0a7ebad8a0e9
Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion
Medium
CVE-2019-15109
The Events Calendar <= 4.8.1 - Cross-Site Scripting via tribe_paged Parameter
High
CVE-2019-5924
Smart Forms < 2.6.26 - Cross-Site Request Forgery
High
CVE-2019-15114
FormCraft <= 1.2.1 - Cross-Site Request Forgery
High
CVE-2019-5920
FormCraft <= 1.2.1 - Cross-Site Request Forgery
Critical
4d38167c-47f8-473c-94de-91d9b439ddde
Indeed Membership Pro <= 7.5 - Arbitrary File Upload
High
01f0f734-b22e-4cd6-be99-ce6c2cd6f2c9
Indeed Membership Pro <= 7.5 - Remote Image File Inclusion
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
High
CVE-2019-9573
WP Human Resource Management Plugin < 2.2.6 - Authorization Bypass
High
CVE-2019-15115
LoginWP <= 2.9.1 - Multiple Cross-Site Request Forgery vulnerabilities
Medium
CVE-2019-9168
WooCommerce <= 3.5.4 - Stored Cross-Site Scripting
Medium
CVE-2019-8943
WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion
High
CVE-2019-8942
WordPress Core < 5.0.1 - Remote Code Execution
Medium
CVE-2019-7412
PS PHPCaptcha <= 1.1.0 - Authenticated Denial of Service
Medium
CVE-2019-7411
Launcher: Coming Soon & Maintenance Mode < 1.0.11 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.