Medium
CVE-2018-19564
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2018-20984
Patreon WordPress < 1.2.2 - PHP Object Injection
Medium
CVE-2018-20838
AMP for WP <= 0.9.97.20 - Stored Cross-Site Scripting
Critical
02bb12db-0bc9-4c13-918f-1f90b500c165
PropertyHive < 1.4.26 - Remote Code Execution
Medium
CVE-2018-19287
Ninja Forms Contact Form <= 3.3.17 - Cross-Site Scripting via begin_date, end_date, or form_id Parameter
Medium
CVE-2018-20368
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-5655
Weblizar Pin Feeds < 1.1.2 - Cross-Site Scripting
High
CVE-2018-5656
Weblizar Pin Feeds < 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2018-5312
WP Tabs – Responsive Tabs Plugin for WordPress <= 1.8.0 - Stored Cross-Site Scripting
High
CVE-2018-5310
Media from FTP Plugin < 9.85 - Directory Traversal
Medium
CVE-2018-5311
Easy Custom Auto Excerpt < 2.4.7 - Stored Cross-Site Scripting
High
CVE-2018-5669
Read and Understood < 2.2 - Cross-Site Request Forgery
High
f53e5192-e809-400c-aed9-36b5d6415a9d
Orbit Fox by ThemeIsle <= 2.6.3 - Improper REST Capabilities Checks
High
bd302d8e-bba1-4fa1-bcbc-591d894ca1d6
Simple Link Directory <= 5.6.0 - PHP Object Injection
Critical
2f47a01d-b259-465e-bec1-9079987dc5a5
Kiwi Social Share <= 2.0.10 - Arbitrary Options Update
Medium
CVE-2018-16173
LearnPress <= 3.0.12 - Cross-Site Scripting
Medium
CVE-2018-16174
LearnPress <= 3.0.12 - Open Redirect
High
CVE-2018-16175
LearnPress <= 3.0.12 - Authenticated SQL Injection
Critical
CVE-2018-21003
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.2.7 - SQL Injection
Critical
CVE-2018-21004
RSVPMaker < 5.6.4 - SQL Injection
Critical
CVE-2018-19207
WP GDPR Compliance <= 1.4.2 - Arbitrary Options Update and Action Calling
Medium
478723c4-cc45-4241-af45-21ee537f1dfa
Better WordPress reCAPTCHA <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2018-19370
Yoast SEO <= 9.1.0 - Race Condition to Remote Code Execution
High
CVE-2018-20714
WooCommerce <= 3.4.5 - WooCommerce File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.