Medium
CVE-2019-20445
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
b3bae191-9395-481c-93bf-b17cf5f87271
Chained Quiz <= 1.1.9 -Stored Cross-Site Scripting
Medium
CVE-2020-5243
Denial of Service in uap-core when processing crafted User-Agent strings
Medium
23f1b1da-2ac0-49c1-bb32-2fe2cfd56192
Real Testimonials <= 2.1.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-7597
codecov NPM module allows remote attackers to execute arbitrary commands
Unrated
drupal-contrib-2020-004
drupal/profile - SA-CONTRIB-2020-004
High
CVE-2019-10790
TaffyDB can allow access to any data items in the DB
Critical
CVE-2019-20477
Deserialization of Untrusted Data in PyYAML
Medium
6aae5b1d-9b84-4628-b0b6-7b39054e08a0
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
Medium
CVE-2020-9003
Modula Image Gallery <= 2.2.4 - Authenticated Stored Cross-Site Scripting
High
52d390e0-95ca-4570-8d4c-f679ee86ffea
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
Medium
404aabc5-1ff4-492d-8cab-4b83eb68157a
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting
High
CVE-2020-5237
Relative Path Traversal (CWE-23) in chunked uploads in oneup/uploader-bundle
Medium
CVE-2020-10385
Contact Form by WPForms <= 1.5.8.2 - Stored Cross-Site Scripting
High
CVE-2020-5530
Easy Property Listings < 3.4 - Cross-Site Request Forgery
High
66ddb0f7-4d4c-4c4f-b766-9a07609cd0e5
Fruitful < 3.8.1 - Reflected Cross-Site Scripting
Critical
CVE-2020-9043
wpCentral <= 1.5.0 - Improper Access Control to Privilege Escalation
Critical
CVE-2020-36837
ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
Critical
CVE-2020-9006
Popup Builder 2.2.8 - 2.6.7.6 - PHP Object Injection
High
CVE-2019-10773
Yarn Improper link resolution before file access (Link Following)
Critical
CVE-2019-10777
OS command injection in aws-lambda
Critical
CVE-2019-10776
OS command injection in git-diff-apply
Critical
CVE-2019-15597
Command Injection in node-df
Medium
CVE-2019-14863
AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.