Medium
CVE-2018-20965
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2018-0586
Ultimate Member <= 2.0.3 - Directory Traversal
High
CVE-2018-20964
Contact Form Email <= 1.2.65 - Cross-Site Request Forgery
High
CVE-2019-15238
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery
Critical
CVE-2019-13578
GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection
Medium
5b266a09-22f3-4ac3-a2ba-8321503200e7
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
Medium
CVE-2018-20963
Contact Form Email <= 1.2.65 - Cross-Site Scripting
High
CVE-2019-15779
Social Feed Gallery <= 2.4.7 - Cross-Site Request Forgery
Medium
CVE-2018-0585
Ultimate Member <= 1.3.88 - Cross Site Scripting
Unrated
685
JS support ticket - SQL Injection
Medium
CVE-2019-15818
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authentication on Option Changes
Medium
CVE-2019-14948
PPOM for WooCommerce <= 18.3 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-15776
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
High
CVE-2019-15781
Social LikeBox & Feed <= 2.8.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2018-20858
Cross-site scripting in recommender-xblock
High
CVE-2019-14806
Pallets Werkzeug Insufficient Entropy
Critical
CVE-2019-14234
SQL Injection in Django
High
CVE-2019-14216
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery to Remote Code Execution
Critical
CVE-2019-15780
Formidable Form Builder <= 4.02 - PHP Object Injection
Critical
CVE-2019-15819
ND Restaurant Reservations <= 1.3 - Options Change
High
CVE-2019-14773
Woody Ad Snippets <= 2.2.5 - Arbitrary Post Deletion
Unrated
683
Easy Discuss
High
CVE-2019-10099
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (contr
High
CVE-2019-14679
Pricing Table Plugin - < 2.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.