High
CVE-2020-28035
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2020-28033
WordPress Core < 5.5.2 - Spam Embed on Multisite Installations
Medium
CVE-2020-28039
WordPress Core < 5.5.2 - Arbitrary File Deletion
Medium
CVE-2020-28037
WordPress Core < 5.5.2 - Misconfiguration That Allows Trigger of New Installation
Medium
CVE-2020-28038
WordPress Core < 5.5.2 - Stored Cross-Site Scripting via post slugs
Medium
CVE-2020-28040
WordPress Core < 5.5.2 - Cross-Site Request Forgery to Theme Image Change
High
CVE-2020-28032
WordPress Core < 5.5.2 - Deserialization Gadget
Medium
4d32eae6-f49f-403b-b295-c72b1486c71c
Greenmart <= 2.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2020-28034
WordPress Core < 5.5.2 - Reflected Cross-Site Scripting via Global Variables
High
CVE-2020-28036
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
Critical
CVE-2021-29476
WordPress Core < 5.5.3 - PHP Object Injection Gadget
High
2fd0073c-3f75-4783-838d-d01fdea008c1
PDF File Browser <= 1.3 - Remote Code Execution
Critical
e6d1ad58-894c-40ed-968e-9ce64eebba55
Advanced Booking Calendar <= 1.6.1 - Unauthenticated SQL Injection
Medium
CVE-2020-27344
CM Download Manager <= 2.7.0 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-5651
Simple Download Monitor <= 3.8.8 - SQL Injection
Critical
CVE-2020-27615
Loginizer <= 1.6.3 - SQL Injection
Medium
CVE-2020-5650
Simple Download Monitor <= 3.8.8 - Unauthenticated Stored Cross-Site Scripting
High
23f0315f-5523-4e16-8adf-f9fe9254032a
Super Store Finder <= 6.1, Super Interactive Maps <= 1.9, Super Logo Showcase <= 2.2 - Arbitrary File Upload
Medium
CVE-2020-27356
Debug Meta Data <= 1.1.2 - Stored Cross-Site Scripting
Medium
CVE-2020-28707
Stockdio Historical Chart < 2.8.1 - Reflected Cross-Site Scripting
High
CVE-2020-36725
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Medium
3a11216c-868c-4dd9-b6d5-2a772d7d303e
Comment Press <= 2.7.1 - Cross-Frame Scripting
Critical
0ee4fe34-e6ae-4f37-a1a7-ebb153ae7a67
Realia <= 1.4.0 - Arbitrary Post Deletion
High
f3584b5b-ff93-4a47-b6e6-f95335ee88b6
Mailster <= 2.4.5.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.