Medium
74a33813-ca5a-4cf4-9d36-b71ca76b8915
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2018-19041
Media File Manager <= 1.4.2 - Reflected Cross-Site Scripting
Critical
CVE-2019-1010209
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.4.13 - Arbitrary File Upload
Medium
CVE-2018-18919
WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting
Medium
CVE-2018-18872
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting
Medium
1295f1a0-1f5a-4707-96cc-c408a6819e87
Elegant Themes (Various Versions) - Stored Cross-Site Scripting
Critical
e8469ffc-477a-4ff1-853b-dcefba2b9c4e
Rockhoist Ratings < 1.2.3 - SQL Injection
Medium
CVE-2018-18379
Elementor Pro <= 2.0.9 - Cross-Site Scripting
High
d7edb3be-ffa9-4e80-addf-5e5aca6050ef
Pie Register < 3.0.18 - Unauthenticated Cross-Site Scripting
High
52c24f18-832b-4416-a148-a23e38b257e0
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
Medium
9ea2964f-9e3a-450b-9724-5a520c73d306
AMP for WP <= 0.9.97.19 - Missing Authorization
Medium
6a0c948b-7f14-450e-858a-77c1d3dd0761
All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-18460
WP Live Chat Support <= 8.0.15 - Cross-Site Scripting
Critical
CVE-2018-18461
Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload
Medium
CVE-2018-18373
Support Board for WordPress <= 1.2.3 - Cross-Site Scripting
Critical
CVE-2018-9206
Tajer <= 1.0.5 - Arbitrary File Upload
High
3e8a25d1-4bd8-4ecf-ac10-a333abaac328
Image Intense <= 3.2.5 - SQL Injection
Medium
CVE-2018-17583
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action
Medium
CVE-2018-17585
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via wpFastestCachePage options, wpFastestCachePreload_number or wpFastestCacheLanguage parameter
Medium
CVE-2018-17586
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via rules[0][content] parameter
High
CVE-2018-17584
WP Fastest Cache <= 0.8.8.5 - Cross-Site Request Forgery via page to wpfastestcacheoptions
High
CVE-2018-18069
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2018-17866
Ultimate Member <= 2.0.27 - Multiple Cross-Site Scripting vulnerabilities
Medium
CVE-2018-18019
Slideshow Gallery <= 1.6.8 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.