Critical
CVE-2018-9206
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2018-25105
File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download
High
cdac6080-5e23-488d-8b3c-de0c6c92e344
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
High
5143a2d2-504a-46b8-b82b-19beba4da64d
Ultimate Member <= 2.0.21 - Arbitrary File Upload
Medium
CVE-2018-19043
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Read
Medium
CVE-2018-10101
WordPress Core < 4.9.5 - Security Misconfiguration with URL Hostnames
Critical
e7b78960-51ff-440f-8831-d50c11961d9d
Deep Blue <= 1.9.2 - Arbitrary File Upload
High
0c58c1c6-cdda-463c-9a76-4ace96138dcb
Google Forms < 0.92 - Unauthenticated Server Side Request Forgery
High
CVE-2018-25019
LearnDash LMS <= 2.5.3 - Arbitrary File Upload
Critical
CVE-2018-3811
Smart Google Code Inserter < 3.5 - Unauthenticated SQL Injection
High
CVE-2018-3810
Smart Google Code Inserter < 3.5 - Stored Cross-Site Scripting
Medium
86c0f530-bf4c-4de4-84db-e8469cea76c5
Woocommerce CSV importer <= 3.3.6 - Arbitrary File Deletion
Critical
CVE-2017-16949
AccessPress Anonymous Post Pro <= 3.1.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2018-5316
SagePay Server Gateway for WooCommerce < 1.0.9 - Cross-Site Scripting
Medium
CVE-2017-18586
Insert Pages < 3.2.4 - Authenticated Directory Traversal
Critical
f71f2096-e4c9-406a-a4e5-0006b380fbaa
VaultPress <=1.9 - Remote Code Execution
Critical
f107a2be-e75b-43f3-8d41-b68c50c27f55
jQuery HTML5 File Upload <= 3.0 - Unauthenticated Arbitrary File Upload
Critical
0d4e3560-2208-4122-812e-0c506fe45126
Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion
Medium
d2e040bd-df5f-4b40-bc7b-9521f224c297
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
High
CVE-2017-9066
WordPress Core < 4.7.5 - Server-Side Request Forgery
High
CVE-2017-1000170
JQueryFileTree <= 2.1.5 - Directory Traversal
Critical
CVE-2017-1002003
Wp2android <= 1.1.4 - Arbitrary File Upload
Critical
CVE-2017-1002001
Mobile App Builder by WapPress <= 1.05 - Arbitrary File Upload
High
CVE-2017-6819
WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.