Medium
CVE-2020-24149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2020-24147
WordPress Importer : Import any XML File to WordPress < 1.0.1 - Server-Side Request Forgery
High
CVE-2021-24208
WP Page Builder <= 1.2.3 - Multiple Stored Cross-Site scripting
Medium
CVE-2021-24226
AccessAlly <= 3.5.6 - Information Exposure
Critical
CVE-2021-24223
N5 Upload Form <= 1.0 - Arbitrary File Upload
High
86c1b729-e8fe-46e8-8d57-c6312087c6b2
Under Construction, Coming Soon & Maintenance Mode <= 1.1.1 - Server Side Request Forgery
Medium
5f6b88fb-1070-427b-a51f-23fbede3dd59
Under Construction, Coming Soon & Maintenance Mode <= 1.1.1 - Server Side Request Forgery
Medium
CVE-2021-24154
Theme Editor <= 2.5 - Authenticated Arbitrary File Download
High
7934c73c-17cf-4cec-a8da-654cee453b8f
Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion
High
CVE-2021-24150
Like Button Rating ♥ LikeBtn < 2.6.32 - Server-Side Request Forgery
High
CVE-2021-26754
wpDataTables (Premium) <= 3.4 - SQL Injection
Critical
575d1353-70af-4200-9088-662f7a052b76
Super Forms – Drag & Drop Form Builder <= 4.9.700 - Arbitrary File Upload
Critical
CVE-2021-3120
YITH WooCommerce Gift Cards Premium <= 3.3.0 - Arbitrary File Upload
Critical
860e70be-2ccd-4d4d-b0d9-bde8d163c211
123ContactForm for WordPress <= 1.5.6 - Arbitrary File Upload
Critical
03be4344-d388-4357-8a2e-c3b9c8b83017
e-signature < 1.5.6.8 - Unauthenticated Remote Code Execution
Medium
CVE-2020-29172
LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting
High
CVE-2020-28976
Canto <= 1.9.0 - Blind Server-Side Request Forgery via detail.php
High
CVE-2020-24063
Canto <= 1.9.0 - Blind Server-Side Request Forgery via download.php
Critical
CVE-2020-36849
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2020-36847
Simple File List < 4.2.3 - Remote Code Execution
High
CVE-2020-28036
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
High
2fd0073c-3f75-4783-838d-d01fdea008c1
PDF File Browser <= 1.3 - Remote Code Execution
High
23f0315f-5523-4e16-8adf-f9fe9254032a
Super Store Finder <= 6.1, Super Interactive Maps <= 1.9, Super Logo Showcase <= 2.2 - Arbitrary File Upload
Critical
CVE-2020-36706
Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.