Medium
CVE-2018-20978
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2018-8710
WOOF - Products Filter for WooCommerce <= 1.1.9 - Remote Code Execution
Critical
CVE-2018-8711
WOOF - Products Filter for WooCommerce <= 1.1.9 - Local File Inclusion
High
CVE-2018-7433
iThemes Security <= 6.9.0 - Cross-Site Scripting
Critical
cdbf2658-b819-4fd3-ac89-8b90a7e3a2cf
Social Share, Social Login and Social Comments <= 7.10.6 - Authentication Bypass
High
CVE-2018-7204
Bit File Manager <= 5.0.0 - Information Disclosure
High
CVE-2018-7586
WordPress Gallery Plugin – NextGEN Gallery <= 2.2.46 - Sensitive Information Disclosure
Critical
61e6db2f-5dfd-44ef-9500-9f0cb5cd67ba
WP Job Manager <= 1.29.2 - PHP Object Injection
Medium
CVE-2017-18613
Trust Form <= 2.0.0 - Cross-Site Scripting
High
5c9a5613-770f-4294-997e-17fd5194ab70
Custom Permalinks <= 1.1 - Authenticated SQL Injection
Medium
0d1a12b9-ac2e-4c60-8dd5-484944bb0ab8
Custom Permalinks <= 1.1 -Cross-Site Scripting
High
CVE-2018-20980
Ninja Forms Contact Form <= 3.2.14 - Parameter Tampering
Critical
CVE-2018-1000131
WP Support Plus Responsive Ticket System <= 9.0.2 - SQL Injection
High
fe7e6a53-36c3-41fc-bae8-a9e1de2494ad
Category Order and Taxonomy Terms Order <= 1.5.2.2 - Authenticated PHP Object Injection
High
65b3baaf-86e4-4dd2-b3eb-84c21eabdd6d
WP Fastest Cache <= 0.8.7.4 - SQL Injection
Medium
CVE-2018-7280
Ninja Forms Contact Form <= 3.2.13 - Cross-Site Scripting
Critical
e7b78960-51ff-440f-8831-d50c11961d9d
Deep Blue <= 1.9.2 - Arbitrary File Upload
High
f83f878d-b708-4677-929a-e1ced535d99f
MainWP Child < 3.4.5 - Authentication Bypass
Medium
CVE-2018-6944
Ultimate Member <= 2.0 - Cross-Site Scripting
High
CVE-2018-20971
Church Admin < 1.2550 - Cross-Site Request Forgery
Medium
CVE-2018-6943
Ultimate Member <= 2.0.3 - Cross-Site Scripting
High
CVE-2018-6891
WordPress Online Booking and Scheduling Plugin – Bookly <= 14.5 - Cross-Site Scripting
Critical
CVE-2018-21013
Swape - App Showcase & App Store WordPress Theme < 1.2.1 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2018-6469
flickrRSS <= 5.3.1 - Cross-Site Scripting via flickrRSS_tags
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.