High
CVE-2020-28977
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
b71e6219-09cc-484e-8c48-536797d974ce
WordPress WP-Advanced-Search <= 3.3.3 - Unauthenticated Database Export
Medium
CVE-2020-9455
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Email Injection
Critical
8071f117-c341-45bc-8d6e-8aa5d677d65c
WordPress WP-Advanced-Search <= 3.3.3 - Remote Code Execution
High
Exploited in attacks
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
Medium
CVE-2019-19134
Hero Maps Premium <= 2.2.2 - Reflected Cross-Site Scripting
Medium
b3bae191-9395-481c-93bf-b17cf5f87271
Chained Quiz <= 1.1.9 -Stored Cross-Site Scripting
Medium
CVE-2020-10385
Contact Form by WPForms <= 1.5.8.2 - Stored Cross-Site Scripting
Critical
8fcf7283-eb6c-4fee-b606-79026e2227fc
Profile Builder <= 3.1.0 - Privilege Escalation
High
CVE-2020-8596
Participants Database <= 1.9.5.5 - SQL Injection
Medium
CVE-2020-8594
Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting
Critical
CVE-2020-36724
Wordable <= 3.1.1 - Authentication Bypass
Medium
b9f5b68f-bf81-4157-920a-f14eb29390a6
Multiple Domain <= 1.0.2 - Cross-Site Scripting
Medium
CVE-2020-7228
Calculated Fields Form <= 1.0.353 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-7239
Chatbot with IBM Watson < 0.8.21 - Cross-Site Scripting
Medium
f373a1d5-3d7e-4a0a-af03-28ca6ce6a170
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download
Critical
CVE-2020-7048
WP Database Reset <= 3.1 - Unauthenticated Database Reset
Medium
CVE-2020-7104
Chained Quiz <= 1.1.8.1 - Reflected Cross-Site Scripting
Critical
CVE-2020-7047
WP Database Reset <= 3.1 - Privilege Escalation
Medium
d5ecb52e-6bf0-4168-b0d7-6972d23c9122
Real Estate 7 WordPress < 2.9.5 - Multiple Vulnerabilities
Critical
CVE-2020-8771
Backup and Staging by WP Time Capsule <= 1.21.15 - Authentication Bypass
Medium
03b1376e-8ef3-4bd2-904b-6819aa21d144
Computer Repair Shop < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2020-6167
Minimal Coming Soon & Maintenance Mode <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes
Medium
CVE-2020-6166
Minimal Coming Soon & Maintenance Mode <= 2.16 - Missing Authorization to Export Settings/Theme Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.