High
CVE-2020-25074
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
Exploited in attacks
CVE-2020-13927
Authentication bypass in Apache Airflow
Critical
CVE-2020-36726
Ultimate Reviews < 2.1.33 - PHP Object Injection
Medium
CVE-2020-7764
Web Cache Poisoning in find-my-way
High
CVE-2020-7750
Cross-Site Scripting in scratch-svg-renderer
Critical
CVE-2020-36156
Ultimate Member <= 2.1.11 - Authenticated Privilege Escalation via Profile Update
Critical
CVE-2020-36155
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta
Critical
CVE-2020-36157
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles
Unrated
726
JomSocial - XSS (Cross Site Scripting)
Critical
562d0052-7f1a-441b-9ff7-1c8bcb4b74b4
Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection
Critical
CVE-2020-26214
LDAP authentication bypass with empty password
High
CVE-2020-7763
Arbitrary File Read in phantom-html-to-pdf
High
CVE-2020-27589
Improper Certificate Validation in blackduck
High
d0a311b7-5582-4581-bf4e-636d8a936ac6
WooCommerce Blocks <= 3.7.0 - Authorization Bypass
High
CVE-2020-28339
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
Medium
0c6a49d1-633b-47aa-8390-5df3bf8f71a5
WooCommerce <= 4.6.1 & WooCommerce Blocks <= 3.7.0 - Settings Bypass leading to Account Creation
Low
CVE-2020-15273
Edit feed settings and others, Cross Site Scripting(XSS) Vulnerability in Latest Release 4.4.0
Critical
CVE-2017-15708
Remote Code Execution in Apache Synapse
High
CVE-2020-27216
Local Temp Directory Hijacking Vulnerability
Critical
ea00bcc9-6f9c-4704-8337-074d5356e9e2
WP Activity Log <= 4.1.4 - SQL Injection
Unrated
725
publisher - XSS (Cross Site Scripting)
Critical
CVE-2020-36718
GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
High
CVE-2021-24143
AccessPress Social Icons <= 1.8.0 - Author+ SQL Injection
Critical
CVE-2020-36847
Simple File List < 4.2.3 - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.