High
CVE-2019-25216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
2edb574d-74b7-4f72-91a1-bb6632709b7a
WooCommerce <= 3.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-14787
Newsletters <= 4.6.18 - Cross-Site Scripting via contentarea Parameter
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Critical
bbd1e68f-1f84-40d6-9ecd-34280c3c5099
Yet Another Stars Rating <= 1.8.6 - Unauthenticated PHP Object Injection
High
b96f40fe-3ffa-4fc5-b51a-ff3771224bd5
WP Job Manager <= 1.31.2 - PHP Object Injection via PHAR Deserialization
Critical
CVE-2018-20156
WP Maintenance Mode <= 2.0.6 - Remote Code Execution
Critical
CVE-2018-20984
Patreon WordPress < 1.2.2 - PHP Object Injection
High
f2862cee-0412-42ba-9a8e-e5722bece775
Redirection <= 3.6.3 - Cross-Site Request Forgery to Remote Code Execution
High
bd302d8e-bba1-4fa1-bcbc-591d894ca1d6
Simple Link Directory <= 5.6.0 - PHP Object Injection
High
6b8655a6-f410-480d-8c45-2527b53fa129
Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection
High
CVE-2018-1000504
Redirection <= 2.7.3 - Local File Inclusion
Medium
CVE-2018-11105
3CX Live Chat <= 8.0.07 - Cross-Site Scripting
Medium
CVE-2018-11486
Advance Search for WooCommerce <= 1.0.9 - Cross-Site Scripting
High
fe7e6a53-36c3-41fc-bae8-a9e1de2494ad
Category Order and Taxonomy Terms Order <= 1.5.2.2 - Authenticated PHP Object Injection
Medium
CVE-2018-5651
WP Markdown Editor (Formerly Dark Mode) < 1.7 - Cross-Site Scripting
High
CVE-2017-18356
WooCommerce <= 3.2.3 - Authenticated PHP Object Injection
Medium
9b780e28-3254-49d8-9b62-ade1c0a42d8a
Rating Widget Plugin < 2.9.0 - Sensitive Information Disclosure
Medium
CVE-2017-10991
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting
High
99418bd5-041a-4210-9571-fee6842fb692
Tracking Code Manager < 1.11.5 - Denial of Service
Critical
cc550fd9-c332-4a40-b4a9-166d5ffebc76
My Geo Posts Free <= 1.2 - PHP Object Injection
Critical
4b40e33b-4aa8-4378-b044-a8a636d34f73
Referrer Detector <= 4.2.1.0 - PHP Object Injection
High
01139cbd-1116-4cf8-bdcb-cb182588d093
BlogVault WordPress Backup Plugin 1.40 - 1.44 - Unauthenticated PHP Object Injection
High
02665811-15ba-434c-a4d0-df5402a128f4
Simple Ads Manager <= 2.9.8.125 - Unauthenticated PHP Objection Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.