Medium
CVE-2019-19981
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-19985
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated File Download w/ Information Disclosure
Medium
CVE-2019-19980
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization to Test Email
High
CVE-2019-14467
Social Photo Gallery <= 1.0 - Remote Code Execution
Medium
CVE-2019-17599
Quiz And Survey Master <= 6.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2019-19984
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization
High
CVE-2019-20361
Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection
Medium
CVE-2019-17515
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.127.3 - Reflected Cross-Site Scripting
High
CVE-2019-14366
WP SlackSync <= 1.8.5 - Sensitive Information Disclosure
High
CVE-2019-14365
WP Intercom Slack <= 1.2.1 - Sensitive Information Disclosure
Medium
CVE-2019-17235
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Information Disclosure
High
CVE-2019-17237
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Cross-Site Request Forgery
High
CVE-2019-17234
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2019-17236
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Stored Cross-Site Scripting
Medium
86cb08ae-aa21-4ee6-baed-03429e4d38e2
MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting
Medium
1a0fcd50-e9d6-49a5-979f-61f953b1a1cd
Safe SVG <= 1.9.5 - Cross-Site Scripting
Medium
CVE-2019-25151
Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation
Medium
CVE-2019-18854
Safe SVG <= 1.9.4 - Denial of Service
High
7886708a-8daa-465b-b820-53bf409e682c
Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-18855
Safe SVG <= 1.9.4 - Denial of Service
Medium
CVE-2019-18668
Currency Switcher <= 2.11.1 - Authorization Bypass
Medium
CVE-2019-16251
YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change
Medium
CVE-2020-20627
GiveWP <= 2.5.9 - Missing Authorization to Settings Update
High
CVE-2020-7055
Elementor Website Builder <= 2.7.4 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.