High
f3584b5b-ff93-4a47-b6e6-f95335ee88b6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2020-5642
Live Chat – Live support <= 3.1.0 - Cross-Site Request Forgery
High
CVE-2021-24377
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
Medium
CVE-2021-24378
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
Critical
CVE-2021-24376
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
High
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
High
CVE-2020-36174
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation
Medium
CVE-2015-9360
UpdraftPlus <= 1.9.63 and UpdraftPlus (paid) <= 2.9.63 - Cross-Site Scripting
Medium
CVE-2020-36175
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Critical
CVE-2019-13571
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection
Medium
CVE-2020-36173
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
Medium
CVE-2020-36754
Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36752
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36748
Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass
High
CVE-2020-36707
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery
Medium
CVE-2020-36745
WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36741
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-5780
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Medium
1f092dae-e298-42e3-b494-fc7b7669b300
All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24133
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery
High
CVE-2020-25379
Recall Products <= 0.8 - Authenticated SQL Injection
Medium
CVE-2020-25375
WP smart CRM & Invoices FREE <= 1.8.7 - Stored Cross-Site Scripting
High
CVE-2020-11497
NAB Transact < 2.1.2 - Payment System Bypass
High
CVE-2020-35948
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.