High
aa735320-f7fe-4e51-9f9a-f4c8f3ddc2e7
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2018-15877
Plainview Activity Monitor < 20180826 - Remote Command Injection
High
CVE-2018-16308
Ninja Forms Contact Form <= 3.3.13 - CSV Injection
Critical
CVE-2018-14502
Chained Quiz <= 1.0.8.2 - Unauthenticated SQL Injection
High
CVE-2017-1000600
WordPress Core < 4.9 - Insecure Deserialization
Medium
CVE-2018-14430
Multi Step Form <= 1.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2018-13137
Events Manager <= 5.9.4 - Cross-Site Scripting
High
CVE-2018-1000504
Redirection <= 2.7.3 - Local File Inclusion
Critical
CVE-2018-20981
Ninja Forms <= 3.3.8 - Insufficient Restrictions during Export Personal Data requests
High
CVE-2018-12895
WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion
Medium
CVE-2018-11105
3CX Live Chat <= 8.0.07 - Cross-Site Scripting
High
CVE-2018-21002
JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery
High
CVE-2018-11580
Mass Pages/Posts Creator <= 1.2.2 - Missing Authorization
Medium
CVE-2018-11633
Digital Goods < 2.2 - Cross-Site Request Forgery
Medium
CVE-2018-11579
Woocommerce Category Banner Management <= 1.1.0 - Missing Authorization
High
CVE-2018-20974
JS Job Manager <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2018-0602
Email Subscribers & Newsletters <= 3.4.12 - Cross-Site Scripting
Medium
CVE-2018-21011
Charitable <= 1.5.13 - Unauthorized Access to Information Disclosure
High
CVE-2018-1000506
Metronet Tag Manager < 1.2.9 - Cross-Site Request Forgery
High
CVE-2018-1000511
WP ULike < 3.2 - Missing Authorization
Medium
CVE-2018-19043
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Read
High
CVE-2018-10233
Ultimate Member <= 2.0.6 - Multiple Cross-Site Request Forgery Issues
Medium
CVE-2018-7747
Caldera Forms <= 1.5.9.1 - Cross Site Scripting
Medium
CVE-2018-1000510
WP Image Zoom <= 1.23 - Cross-Site Request Forgery to Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.