High
08e9e7f4-0f25-4bc1-85b7-4b504ed38582
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2022-1166
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing
Critical
a96c9047-9dea-4bc7-8982-8983930f7cfa
Augmented reality plugin <= 1.2.0 - Arbitrary File Upload
Critical
26140315-04c7-4056-a570-865cd4ffe85e
Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload
High
CVE-2020-35945
Elegant Themes (Multiple Versions) - Arbitrary File Upload
High
CVE-2020-36669
JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2020-15092
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
Critical
CVE-2020-36705
Adning Advertising <= 1.5.5 - Arbitrary File Upload
High
CVE-2020-36701
Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload
High
CVE-2020-28978
Canto <= 1.9.0 - Blind Server-Side Request Forgery via tree.php
Medium
CVE-2020-10195
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
High
CVE-2020-28977
Canto <= 1.9.0 - Blind Server-Side Request Forgery via get.php
Critical
8071f117-c341-45bc-8d6e-8aa5d677d65c
WordPress WP-Advanced-Search <= 3.3.3 - Remote Code Execution
High
Exploited in attacks
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
High
CVE-2020-36836
WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2020-36875
AccessAlly < 3.3.2 - Arbitrary Code Execution
High
82ce66d0-dc53-4433-b499-30bfd48efaf2
Elegant Themes Divi 3.23 - 4.0.9, Divi Extra 2.23 - 4.0.9, Divi Builder 2.23 - 4.0.9 - PHP Code Injection
Medium
CVE-2019-17670
WordPress Core < 5.2.4 - Server Side Request Forgery #2
Medium
CVE-2019-17669
WordPress Core < 5.2.4 - Server Side Request Forgery
Critical
CVE-2019-16932
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery
Medium
CVE-2019-25315
Server Log Viewer <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2019-25213
Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
Medium
CVE-2019-16332
API Bearer Auth < 20190907 - Cross-Site Scripting
High
CVE-2019-12570
Server Status by Hostname/IP <= 4.6 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.