Medium
45e61d76-085d-48ba-b5ae-cc75f91d1250
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2019-15647
WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 1.3.5 - Remote Code Execution
High
CVE-2019-11590
Form Maker by 10Web <= 1.13.4 - Cross-Site Request Forgery to Local File Inclusion
High
CVE-2019-11591
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery
High
CVE-2019-10673
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
High
CVE-2019-1000031
article2pdf <= 0.27 - Denial of Service
Critical
05c40628-b8fc-48ff-8819-c0955d69fce0
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor
Medium
CVE-2019-15650
Stops Core Theme And Plugin Updates <= 8.0.4 - Insufficient Restrictions on Option Changes
Medium
b09c98f2-6492-41e1-8d87-e10ed2ef5f9f
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting
Medium
bf5fe4c5-0a18-4efb-b492-fad2ae3ca3da
Google Adsense & Banner Ads by AdsforWP < 1.6 - Cross-Site Scripting
Medium
1a76571a-f820-4902-afa9-287b59a11d14
Nested Pages <= 3.0.7 - Missing Authorization
Critical
CVE-2019-1010257
article2pdf 0.24 - 0.27 - Information Disclosure
High
934545ff-8886-47c7-ad50-0e5ff513a26c
PWA for WP & AMP Plugin <= 1.0.8 - Cross-Site Scripting
Critical
f8035ed9-d267-44da-9de4-cf3d6ece7059
WP Database Backup <= 5.1.2 - Unauthenticated Settings Update to Remote Code Execution
High
cf48ad3b-9b3a-4052-bacf-52a729d62365
Link Checker <= 1.16.2 - Unauthenticated Stored Cross-Site Scripting
High
8ed9a5df-90d0-4abe-be1c-49c50a6b48b3
Duplicate Page <= 3.3 - SQL Injection
High
Exploited in attacks
CVE-2019-9978
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
Medium
CVE-2019-9908
Font Organizer <= 2.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2019-25141
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
High
CVE-2019-9574
WP Human Resource Management < 2.2.6 - Sensitive Information Disclosure
High
6fb2d9ec-1082-4209-9fc9-6f10ba3a2398
User Login History <= 1.7.0 - SQL Injection via OrderBy
High
2c25a344-4876-4ba8-bbc6-d1a32f4b1d08
User Login History <= 1.7.0 - SQL Injection via Order By
Critical
f6f91414-5035-4cab-81ad-18558fe43500
Better Search < 2.2.3 - SQL Injection
High
CVE-2019-15329
Import and export users and customers <= 1.14.0.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.