Critical
CVE-2019-13578
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2018-20963
Contact Form Email <= 1.2.65 - Cross-Site Scripting
High
CVE-2019-15776
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
High
CVE-2019-14216
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery to Remote Code Execution
High
CVE-2019-25145
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
Medium
8bd04a52-ed59-4305-831e-646ab5801d36
WPS Cleaner <= 1.4.4 - Arbitrary Media File Disclosure
Critical
CVE-2019-13569
Email Subscribers & Newsletters <= 4.1.7 - SQL Injection
Medium
CVE-2019-15827
OneSignal Web Push Notifications <=1.17.7 - Stored Cross-Site Scripting
Critical
CVE-2019-13575
Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection
Medium
CVE-2019-25139
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
High
CVE-2019-25140
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
Medium
CVE-2019-14364
Email Subscribers & Newsletters <= 4.1.6 - Cross-Site Scripting
Medium
CVE-2019-13505
Appointment Hour Booking – WordPress Booking Plugin <= 1.1.45 - Cross-Site Scripting
Medium
CVE-2019-13463
Simple Link Directory < 7.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2019-13478
Yoast SEO <= 11.5 - Authenticated Stored Cross Site Scripting
Medium
CVE-2019-13344
WP Like Button <= 1.6.0 - Missing Authorization
Medium
CVE-2019-15833
Simple Mail Address Encoder < 1.7 - Reflected Cross-Site Scripting
Critical
CVE-2019-15318
Easy Forms for Mailchimp <= 6.5.2 - Code Injection
High
CVE-2019-15834
WebP Converter for Media – Convert WebP and AVIF & Optimize Images <= 1.0.2 - Cross-Site Request Forgery
Medium
68ddc0a1-2f5a-446d-9d83-b6028d012956
WP LiveChat <= 3.7.3 - Stored Cross-Site Scripting
High
3d36d52e-7247-4f06-ae10-7827ae242983
Google Adsense & Banner Ads by AdsforWP <= 1.8 - Cross-Site Request Forgery
Medium
CVE-2019-14789
Custom 404 Pro <= 3.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2019-14786
Rank Math SEO <= 1.0.27 - Authenticated Settings Reset via reset-cmb Parameter
High
1ed98565-3f86-46c0-a696-13d678f2d523
Rank Math SEO <= 1.0.26 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.