Critical
CVE-2018-25105
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2018-16967
File Manager <= 3.0 - Stored Cross-Site Scripting
Medium
c4d8f5a9-56e1-4676-b03f-1f5464c5b29a
Unyson <= 2.7.18 - Sensitive Information Exposure
High
ef888b2e-1fc7-442b-8b67-ebfdcbc76696
I Recommend This < 3.8.2 - Cross-Site Scripting
Critical
d7d6d15c-067f-44cb-bd61-ff39bed7e356
UserPro <= 4.9.27 - Privilege Escalation
Medium
CVE-2018-16363
File Manager <= 2.9 - Reflected Cross-Site Scripting
Critical
CVE-2018-16613
wpForo < = 1.5.1 - Privilege Escalation
High
CVE-2018-1000773
WordPress Core < 5.0.1 - PHAR Unserialization
Medium
CVE-2018-20979
Contact Form 7 <= 5.0.3 - Authorization Bypass
High
cdac6080-5e23-488d-8b3c-de0c6c92e344
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
Medium
CVE-2018-16285
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting
Medium
CVE-2018-17140
Quizlord <= 2.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-17138
Jibu Pro <= 1.7 - Authenticated Stored Cross-Site Scripting
Medium
6ab26526-9fbb-4c2e-be41-73450225b834
WooCommerce <= 3.4.4 - Authenticated PHP Object Injection
High
aa735320-f7fe-4e51-9f9a-f4c8f3ddc2e7
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting
Critical
CVE-2018-16159
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.1.8 - SQL Injection
Medium
CVE-2018-15876
Ajax BootModal Login <= 1.4.3 - CAPTCHA Reuse
High
CVE-2018-15877
Plainview Activity Monitor < 20180826 - Remote Command Injection
High
CVE-2019-15092
Import Export WordPress Users and WooCommerce Customers <= 1.3.1 - CSV Injection
Medium
a068e411-d81f-4162-84e9-f1e9868963f9
Supreme Directory < 1.1.9 - Cross-Site Scripting
High
CVE-2018-16308
Ninja Forms Contact Form <= 3.3.13 - CSV Injection
Critical
CVE-2018-14502
Chained Quiz <= 1.0.8.2 - Unauthenticated SQL Injection
High
CVE-2017-1000600
WordPress Core < 4.9 - Insecure Deserialization
High
CVE-2018-15571
Export Users to CSV <= 1.1.1 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.