Medium
CVE-2018-19487
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2018-19796
Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect
Medium
5193d1c0-5111-4e97-a433-a41a76acbde9
WooCommerce <= 3.5.1 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2018-21007
Woo Confirmation Email < 3.2.0 - Improper Access Control
Medium
a2e1948a-9513-43e4-aadd-369a7f4dc137
Ultimate Member <= 2.0.32 - Cross-Site Request Forgery
Medium
CVE-2018-19564
Easy Testimonials <= 3.5.2 - Stored Cross-Site Scripting
Critical
CVE-2018-20984
Patreon WordPress < 1.2.2 - PHP Object Injection
Medium
CVE-2018-20838
AMP for WP <= 0.9.97.20 - Stored Cross-Site Scripting
Critical
02bb12db-0bc9-4c13-918f-1f90b500c165
PropertyHive < 1.4.26 - Remote Code Execution
Medium
CVE-2018-19287
Ninja Forms Contact Form <= 3.3.17 - Cross-Site Scripting via begin_date, end_date, or form_id Parameter
High
f2862cee-0412-42ba-9a8e-e5722bece775
Redirection <= 3.6.3 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2018-20368
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-5655
Weblizar Pin Feeds < 1.1.2 - Cross-Site Scripting
High
CVE-2018-5656
Weblizar Pin Feeds < 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2018-5312
WP Tabs – Responsive Tabs Plugin for WordPress <= 1.8.0 - Stored Cross-Site Scripting
High
CVE-2018-5310
Media from FTP Plugin < 9.85 - Directory Traversal
Medium
CVE-2018-5311
Easy Custom Auto Excerpt < 2.4.7 - Stored Cross-Site Scripting
High
CVE-2018-5669
Read and Understood < 2.2 - Cross-Site Request Forgery
High
f53e5192-e809-400c-aed9-36b5d6415a9d
Orbit Fox by ThemeIsle <= 2.6.3 - Improper REST Capabilities Checks
High
bd302d8e-bba1-4fa1-bcbc-591d894ca1d6
Simple Link Directory <= 5.6.0 - PHP Object Injection
Critical
2f47a01d-b259-465e-bec1-9079987dc5a5
Kiwi Social Share <= 2.0.10 - Arbitrary Options Update
Medium
CVE-2018-16173
LearnPress <= 3.0.12 - Cross-Site Scripting
Medium
CVE-2018-16174
LearnPress <= 3.0.12 - Open Redirect
High
CVE-2018-16175
LearnPress <= 3.0.12 - Authenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.