Medium
CVE-2018-5668
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2018-20150
WordPress Core < 5.0.1 Reflected Cross-Site Scripting
High
CVE-2018-20151
WordPress Core < 5.0.1 - Sensitive Information Disclosure
Medium
CVE-2018-20152
WordPress Core < 5.0.1 - Authorization Bypass
Medium
CVE-2018-20153
WordPress Core < 5.0.1 - Authenticated Stored Cross-Site Scripting via Comments
High
CVE-2018-20147
WordPress Core < 5.0.1 - Arbitrary File Deletion
Medium
CVE-2018-20149
WordPress Core < 5.0.1 - Stored Cross-Site Scripting via File Uploads
High
CVE-2018-20148
WordPress Core < 5.0.1 - PHP Object Injection
High
CVE-2019-15330
WebP Express < 0.14.11 - Arbitrary File Read
Medium
CVE-2018-20101
Import users from CSV with meta <= 1.12 - Import Cross-Site Scripting
Critical
53b5a052-6e84-4eb5-a7f4-4e32f757f4d6
Smush – Lazy Load Images, Optimize & Compress Images <= 2.9.1 - Cross-Site Scripting
High
35246286-c0df-4f82-84b8-ebefe966a4dc
Contact Form by WPForms <= 1.4.8 - Reflected Cross-Site Scripting
High
15654ff3-2e61-44d2-ae3f-4a353db320cb
Smush – Lazy Load Images, Optimize & Compress Images <= 3.0.0 - Authenticated PHAR Deserialization
Medium
868b7492-c550-4c06-adb0-3478eb7d9b55
CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure
Critical
CVE-2018-20985
WP Payeezy Pay < 2.98 - Local File Inclusion
High
CVE-2019-15872
LoginPress <= 1.1.15 - Authenticated SQL Injection via Settings Import
Medium
65fc55bb-2b86-466a-b43b-554628283f02
LoginPress <= 1.1.15 - Authenticated Stored Cross-SIte Scripting
Medium
CVE-2018-20986
Advanced Custom Fields <= 5.7.7 - Author+ Stored Cross-Site Scripting
High
CVE-2018-19488
JobCareer | Job Board Responsive WordPress Theme < 2.4 - Unauthenticated Arbitrary Password Reset
Medium
CVE-2018-19487
JobCareer | Job Board Responsive WordPress Theme < 2.4 - User Enumeration
Medium
CVE-2018-19796
Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect
Medium
5193d1c0-5111-4e97-a433-a41a76acbde9
WooCommerce <= 3.5.1 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2018-21007
Woo Confirmation Email < 3.2.0 - Improper Access Control
Medium
a2e1948a-9513-43e4-aadd-369a7f4dc137
Ultimate Member <= 2.0.32 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.