High
CVE-2020-35489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2020-36723
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
Medium
CVE-2020-35589
Limit Login Attempts Reloaded <= 2.15.2 - Reflected Cross-Site Scripting
Medium
CVE-2020-29304
DirectoriesPro by SabaiApps <= 1.3.45 - Reflected Cross-Site Scripting
Medium
CVE-2020-29303
DirectoriesPro Plugin by SabaiApps <= 1.3.45 - Cross-Site Scripting via _drts_form_build_id, _t_ Parameters
Medium
CVE-2020-14205
DiveBook <= 1.1.4 - Improper Access Control
High
CVE-2020-35234
Easy WP SMTP <= 1.4.2 - Sensitive Information Disclosure
High
CVE-2020-28976
Canto <= 1.9.0 - Blind Server-Side Request Forgery via detail.php
High
CVE-2020-24063
Canto <= 1.9.0 - Blind Server-Side Request Forgery via download.php
Medium
CVE-2020-36670
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
Medium
CVE-2020-36171
Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads
High
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
Medium
d93006ac-037f-4291-b945-afa38358a037
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery
Medium
8a68d036-9109-4bc0-9451-47fa2f9fa628
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
Medium
8a56c38c-93ba-4e22-92b4-72d79ba8cca4
WP Database Error Manager <= 2.1.6 - Reflected Cross-Site Scripting
Critical
CVE-2020-36849
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2020-27481
Good LMS <= 2.1.4 - Unauthenticated SQL Injection
Critical
CVE-2020-36726
Ultimate Reviews < 2.1.33 - PHP Object Injection
Critical
CVE-2020-36155
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta
High
CVE-2020-28339
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
High
CVE-2020-28035
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
High
CVE-2020-28036
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
Critical
CVE-2020-27615
Loginizer <= 1.6.3 - SQL Injection
High
CVE-2020-36725
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.