Medium
8b089114-b403-4e42-a578-c1f3b100978f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
dae2d028-6976-468a-9e93-ec712887d657
LionScripts: IP Blocker Lite <= 10.4 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
3d5dfccd-74ab-4de9-8ea6-58908865086d
Revamp CRM for WooCommerce < 1.0.4 - Local File Inclusion
High
603b1f0e-185c-4a0a-a6a2-c63105b2c9f3
Finale WooCommerce Sale Countdown <= 2.9.0 - Authenticated Arbitrary File Upload
Medium
b19ce745-2cc4-48eb-b5f3-5011be7cceec
W3 Total Cache <= 0.9.7.3 - Server Side Request Forgery
High
CVE-2018-19456
WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure
Critical
CVE-2019-25138
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
Critical
CVE-2019-11565
Print My Blog <= 1.6.6 - Server-Side Request Forgery
Medium
CVE-2019-11843
MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter
Critical
CVE-2019-1010257
article2pdf 0.24 - 0.27 - Information Disclosure
Critical
CVE-2019-25217
SiteGround Optimizer <= 5.0.12 - Missing Authorization
Critical
4d38167c-47f8-473c-94de-91d9b439ddde
Indeed Membership Pro <= 7.5 - Arbitrary File Upload
High
01f0f734-b22e-4cd6-be99-ce6c2cd6f2c9
Indeed Membership Pro <= 7.5 - Remote Image File Inclusion
Critical
CVE-2019-25296
WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete
Medium
95ad0139-eb12-4c02-95fb-cd19b6a6ab02
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
Critical
CVE-2019-15322
Shortcode Factory <= 2.7 - Local File Inclusion
Critical
CVE-2018-25436
Baggage Freight Shipping Australia <= 0.1.0 - Arbitrary File Upload
Critical
CVE-2024-51792
Audio Record <= 1.0 - Arbitrary File Upload
High
CVE-2018-20463
JSmol2WP <= 1.07 - Server-Side Request Forgery
Medium
CVE-2018-20149
WordPress Core < 5.0.1 - Stored Cross-Site Scripting via File Uploads
Critical
02bb12db-0bc9-4c13-918f-1f90b500c165
PropertyHive < 1.4.26 - Remote Code Execution
High
f2862cee-0412-42ba-9a8e-e5722bece775
Redirection <= 3.6.3 - Cross-Site Request Forgery to Remote Code Execution
High
CVE-2018-5310
Media from FTP Plugin < 9.85 - Directory Traversal
High
CVE-2018-15818
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.