Medium
95ad0139-eb12-4c02-95fb-cd19b6a6ab02
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2019-6703
Total Donations <= 2.0.5 - Missing Authorization to Arbitrary Options Update
Critical
CVE-2018-20555
Social Network Tabs - Social Media API Key Leakage <= 1.7.1 - Information Exposure
High
d056eeea-6ed2-4139-ba32-727a95f29aaf
Polylang <= 2.5 - Cross-Site Request Forgery
Critical
CVE-2019-15322
Shortcode Factory <= 2.7 - Local File Inclusion
High
d969fb35-2ee9-42ca-a9e8-f6453a1e6be9
Companion Auto Update <= 3.3.5 - Authenticated (Admin+) SQL Injection
Medium
CVE-2019-6267
Easy Redirect Manager <= 2.18.18 - Cross-Site Scripting
Medium
CVE-2019-6117
Gallery Images Ape <= 1.6.14 - Stored Cross-Site Scripting
Medium
CVE-2018-16206
spam-byebye <= 2.2.1 - Unauthenticated Cross-Site Scripting
High
CVE-2019-15113
Companion Sitemap Generator – HTML & XML <= 3.6.6 - Cross-Site Request Forgery and Local File Inclusion
Medium
761a4801-fc4a-40a0-b5aa-303d88a87062
User Registration <= 1.5.5 - Cross-Site Scripting
Medium
CVE-2019-1000003
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery
Critical
CVE-2018-25436
Baggage Freight Shipping Australia <= 0.1.0 - Arbitrary File Upload
High
b96f40fe-3ffa-4fc5-b51a-ff3771224bd5
WP Job Manager <= 1.31.2 - PHP Object Injection via PHAR Deserialization
Critical
CVE-2019-15025
Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection
Medium
CVE-2018-20462
JSmol2WP <= 1.07 - Cross-Site Scripting
Critical
CVE-2024-51792
Audio Record <= 1.0 - Arbitrary File Upload
Critical
ff32cb12-f010-45ae-97d7-f36ce2003f3c
UserPro <= 4.9.20 - Privilege Escalation
High
CVE-2018-20556
Booking Calendar <= 8.4.3 - SQL injection
Medium
3f594989-8db3-41c8-9089-b4e2d995270e
Order XML File Export Import for WooCommerce < 1.2.3 - Cross-Site Scripting
High
CVE-2018-20463
JSmol2WP <= 1.07 - Server-Side Request Forgery
High
CVE-2018-20968
Export WordPress Data with Advanced Filters <= 1.4.1 - Cross-Site Request Forgery
High
CVE-2018-20231
Two Factor Authentication <= 1.3.12 - Cross-Site Request Forgery
Critical
CVE-2018-20156
WP Maintenance Mode <= 2.0.6 - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.