Medium
d703abc2-3269-42b2-a75c-d163df62260d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2019-15330
WebP Express < 0.14.11 - Arbitrary File Read
Medium
CVE-2018-20101
Import users from CSV with meta <= 1.12 - Import Cross-Site Scripting
Critical
53b5a052-6e84-4eb5-a7f4-4e32f757f4d6
Smush – Lazy Load Images, Optimize & Compress Images <= 2.9.1 - Cross-Site Scripting
High
35246286-c0df-4f82-84b8-ebefe966a4dc
Contact Form by WPForms <= 1.4.8 - Reflected Cross-Site Scripting
High
15654ff3-2e61-44d2-ae3f-4a353db320cb
Smush – Lazy Load Images, Optimize & Compress Images <= 3.0.0 - Authenticated PHAR Deserialization
Medium
868b7492-c550-4c06-adb0-3478eb7d9b55
CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure
Critical
CVE-2018-20985
WP Payeezy Pay < 2.98 - Local File Inclusion
High
CVE-2019-15872
LoginPress <= 1.1.15 - Authenticated SQL Injection via Settings Import
Medium
65fc55bb-2b86-466a-b43b-554628283f02
LoginPress <= 1.1.15 - Authenticated Stored Cross-SIte Scripting
Medium
CVE-2018-20986
Advanced Custom Fields <= 5.7.7 - Author+ Stored Cross-Site Scripting
Medium
CVE-2018-16478
Path Traversal in simplehttpserver
Unrated
drupal-contrib-2018-078
drupal/salesforce - SA-CONTRIB-2018-078
Unrated
650
Jomres - Other
High
CVE-2018-19488
JobCareer | Job Board Responsive WordPress Theme < 2.4 - Unauthenticated Arbitrary Password Reset
Medium
CVE-2018-19487
JobCareer | Job Board Responsive WordPress Theme < 2.4 - User Enumeration
Medium
CVE-2018-19787
Improper Neutralization of Input During Web Page Generation in LXML
Medium
CVE-2018-19796
Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect
High
CVE-2018-15795
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Pivotal CredHub Service Broker
Medium
5193d1c0-5111-4e97-a433-a41a76acbde9
WooCommerce <= 3.5.1 - Authenticated Stored Cross-Site Scripting
Unrated
drupal-contrib-2018-074
drupal/bootstrap - SA-CONTRIB-2018-074
Critical
CVE-2018-21007
Woo Confirmation Email < 3.2.0 - Improper Access Control
Medium
a2e1948a-9513-43e4-aadd-369a7f4dc137
Ultimate Member <= 2.0.32 - Cross-Site Request Forgery
Critical
ghsa-mh6f-8j2x-4483
Critical severity vulnerability that affects event-stream and flatmap-stream
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.