High
CVE-2019-25147
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
8b089114-b403-4e42-a578-c1f3b100978f
Cookieless Backend Server Tracking for Google Analytics – WordPress Plugin < 1.2.1 - Cross-Site Scripting
High
CVE-2019-15644
Zoho SalesIQ <= 1.0.8 - Stored Cross-Site Scripting
High
CVE-2019-15645
Zoho SalesIQ <= 1.0.8 - Cross-Site Request Forgery
Medium
CVE-2019-5962
Zoho SalesIQ <= 1.0.8 - Cross-Site Scripting
High
CVE-2019-5963
Zoho SalesIQ <= 1.0.8 - Cross-Site Request Forgery
Critical
9729ebf5-ef78-4ef4-81d4-165f422c3847
FV Flowplayer Video Player <= 7.3.14.727 - Unauthenticated SQL Injection
Critical
CVE-2019-15646
RSVPMaker <= 6.1.9 - SQL Injection
High
bf70f652-5244-421c-8ee6-75719315ed64
Advanced Contact form 7 DB <= 1.6.0 - SQL Injection
High
CVE-2019-10673
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
High
8ed9a5df-90d0-4abe-be1c-49c50a6b48b3
Duplicate Page <= 3.3 - SQL Injection
High
6fb2d9ec-1082-4209-9fc9-6f10ba3a2398
User Login History <= 1.7.0 - SQL Injection via OrderBy
High
2c25a344-4876-4ba8-bbc6-d1a32f4b1d08
User Login History <= 1.7.0 - SQL Injection via Order By
Critical
f6f91414-5035-4cab-81ad-18558fe43500
Better Search < 2.2.3 - SQL Injection
High
7b4f63af-cb43-4287-8fdd-0ff1df70c6d6
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) SQL Injection
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
High
c6b395b1-c6fb-4ab9-b446-cba9e32ca65d
Accessibility Suite by Online ADA < 2.0.11 - SQL Injection
High
d969fb35-2ee9-42ca-a9e8-f6453a1e6be9
Companion Auto Update <= 3.3.5 - Authenticated (Admin+) SQL Injection
Medium
868b7492-c550-4c06-adb0-3478eb7d9b55
CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure
High
CVE-2019-15872
LoginPress <= 1.1.15 - Authenticated SQL Injection via Settings Import
Critical
CVE-2018-21003
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.2.7 - SQL Injection
Critical
e8469ffc-477a-4ff1-853b-dcefba2b9c4e
Rockhoist Ratings < 1.2.3 - SQL Injection
High
3e8a25d1-4bd8-4ecf-ac10-a333abaac328
Image Intense <= 3.2.5 - SQL Injection
Medium
3f3c556d-8baf-4d75-a331-51b76ee084ee
Breadcrumb NavXT <= 6.1.0 - Sensitive Data Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.