Critical
bec7d613-b1cd-4a4e-bbd9-62bca3a864a2
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2021-24130
WP Google Map Plugin <= 4.1.4 - Authenticated SQL Injection via Orderby
Medium
414013e9-5baa-4f4f-bf67-f0e821ece807
WPJobBoard <= 5.6.4 - Reflected Cross-Site Scripting & Cross-Frame Scripting
Medium
CVE-2020-36171
Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads
Critical
CVE-2020-26238
Template injection in cron-utils
Low
ghsa-74hv-qjjq-h7g5
datasette-graphql leaks details of the schema of private database files
Medium
CVE-2020-26237
Prototype Pollution in highlight.js
Critical
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Medium
CVE-2020-26232
Open redirect in Jupyter Server
High
CVE-2020-26890
Denial of service attack due to invalid JSON
Critical
CVE-2021-24158
Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated Privilege Escalation
Low
CVE-2020-26229
XML External Entity in Dashboard Widget
High
CVE-2020-26228
Cleartext storage of session identifier
Low
CVE-2020-26231
Bypass of fix for CVE-2020-15247, Twig sandbox escape
Medium
CVE-2020-15247
Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.
High
CVE-2020-15246
Local File Inclusion by unauthenticated users
Low
CVE-2020-15249
Stored XSS by authenticated backend user with access to upload files
Low
CVE-2020-15248
Privilege escalation by backend users assigned to the default "Publisher" system role
High
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
High
07422361-3c7c-4e3c-bbfb-097c7fe5f2b4
Gutenberg Template and Pattern Library & Redux Framework <= 4.1.20 - Cross-Site Request Forgery
Medium
27337cf2-18a0-4f26-a674-3ab2003b4838
WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference
High
CVE-2021-24131
Anti-Spam by CleanTalk < 5.149 - Authenticated SQL Injection
High
CVE-2020-22275
Easy Registration Forms <= 2.0.6 - CSV Injection
High
CVE-2020-22277
Import and export users and customers <= 1.16.3.5 - CSV injection via a customer's profile
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.