High
CVE-2020-7916
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2020-10564
WordPress File Upload <= 4.12.2 - Directory Traversal to Remote Code Execution
High
CVE-2020-36842
Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2020-36704
Fruitful < 3.8.2 - Stored Cross-Site Scripting
High
CVE-2020-28978
Canto <= 1.9.0 - Blind Server-Side Request Forgery via tree.php
Medium
CVE-2020-10195
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
High
CVE-2020-28977
Canto <= 1.9.0 - Blind Server-Side Request Forgery via get.php
High
CVE-2020-10196
Popup Builder <= 3.63 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2020-36713
MStore API <= 2.1.5 - Authentication Bypass
Critical
CVE-2020-11548
Search Meter <= 2.13.2 - Remote Code Execution
Medium
4783eff5-b7cf-4342-b762-85f745c38ec8
Font Awesome 4.0.0-rc15 and 4.0.0-rc16 - API Token Exposure
Medium
CVE-2020-12074
Product Import Export for WooCommerce <= 1.7.4 - Missing Authorization to CSV Import
Critical
CVE-2020-10257
ThemeREX Addons (Various Versions) - Missing Authorization
High
CVE-2020-10568
WPML < 4.3.7 - Cross-Site Request Forgery Bypass
High
CVE-2020-36716
WP Activity Log <= 4.0.1 - Missing Authorization
Critical
CVE-2020-36852
Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping
Critical
CVE-2020-9457
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings Import to Privilege Escalation
Medium
ba98a282-39ee-4a84-b988-ecfc0c4cd297
Brizy - Page Builder < 1.0.114 - Missing Authorization to Settings Update
High
b71e6219-09cc-484e-8c48-536797d974ce
WordPress WP-Advanced-Search <= 3.3.3 - Unauthenticated Database Export
Medium
CVE-2020-9455
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Email Injection
Critical
8071f117-c341-45bc-8d6e-8aa5d677d65c
WordPress WP-Advanced-Search <= 3.3.3 - Remote Code Execution
Medium
CVE-2020-9458
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings and User Data Export
Critical
CVE-2020-9456
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Privilege Escalation
High
CVE-2020-9454
RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Cross-Site Request Forgery to Settings Modification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.