Medium
fb147a5d-65ad-4304-b13a-670f11398e63
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2019-15823
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'action=confirmaction'
Medium
CVE-2019-15826
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via Referer Header
High
b3f75424-b9f3-42ee-a96c-ff0ed30cbd2f
WPS Limit Login < 1.4.6.1 - Cross-Site Request Forgery
High
8ddc4593-bdb4-4b01-be28-4317c76ae6b0
WPS Bidouille <= 1.12.2 - Multiple Cross-Site Request Forgery
Medium
8bd04a52-ed59-4305-831e-646ab5801d36
WPS Cleaner <= 1.4.4 - Arbitrary Media File Disclosure
Critical
5e0ce0dc-34eb-4577-82a5-8ed822847ff4
WPS Limit Login < 1.4.6.1 - Authorization Bypass via IP Spoofing
Medium
CVE-2019-15825
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'action=rp'
Critical
CVE-2019-15822
WPS Child Theme Generator < 1.2 - Directory Traversal
High
28dfc8c9-478c-48b2-8781-7e0787fd50fd
WPS Limit Login < 1.4.6.1 - Stored Cross-Site Scripting
Medium
CVE-2019-15824
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'adminhash'
Medium
CVE-2019-14945
Ultimate Member <= 2.0.53 - Cross-Site Scripting
Critical
CVE-2019-13569
Email Subscribers & Newsletters <= 4.1.7 - SQL Injection
Critical
CVE-2019-14231
Viral Quiz Maker - OnionBuzz < 1.2.2 - SQL Injection
Critical
CVE-2019-14230
OnionBuzz Plugin < 1.2.7 - SQL Injection
Medium
4ed50ad7-a31b-488e-85fc-ff521488f62a
Real Estate 7 WordPress Theme < 2.9.1 - Stored Cross-Site Scripting
High
CVE-2019-1010142
Infinite Loop in scapy
Medium
CVE-2019-1010266
Regular Expression Denial of Service (ReDoS) in lodash
High
CVE-2019-14205
Adaptive Images for WordPress <= 0.6.66 - Local File Inclusion
High
CVE-2019-12934
WP Code Highlight.js <= 0.6.2 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2019-14206
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion
Critical
CVE-2019-1010268
Improper Restriction of XML External Entity Reference in ladon
Medium
CVE-2019-15827
OneSignal Web Push Notifications <=1.17.7 - Stored Cross-Site Scripting
High
CVE-2019-5993
Category Specific RSS Feed Subscription <= 2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.