High
CVE-2020-24312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2020-36730
CMP <= 3.8.1 - Missing Authorization
Critical
CVE-2020-35949
Quiz and Survey Master <= 7.0.0 - Arbitrary File Upload
Medium
CVE-2020-35933
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting
High
CVE-2020-35932
Newsletter <= 6.8.1 - Authenticated PHP Object Injection
Medium
CVE-2020-36668
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure
High
1e8060bc-900f-4f2d-a24e-13dc1d830fc1
Social Rocket <= 1.2.9 - Cross-Site Request Forgery
Medium
CVE-2020-5768
Icegram Email Subscribers & Newsletters <= 4.5.0 - Authenticated SQL Injection
Medium
CVE-2020-35946
All in One SEO Pack <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
85bd9922-3316-4fd0-b31e-c3ca5ab8a79d
Email Verification for WooCommerce <= 1.8.1 - Authentication Bypass
High
CVE-2020-5767
Icegram Email Subscribers & Newsletters Plugin for WordPress <= 4.5.0 - Cross-Site Request Forgery
Medium
0232a3a5-e91e-4213-8c21-900fc805bad7
Contact Builder by Themify <= 1.4.5 - Email Injection
High
2dce9e9a-a2f3-49a9-a6bc-00328632c654
Newsletter <= 6.7.6 - Stored Cross-Site Scripting
Medium
CVE-2020-36728
Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
Medium
4b1568d6-4fea-4ed3-9931-f293932eaa3a
Power's WHOIS Domain Check <= 0.9.31 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24136
Testimonials Widget <= 3.5.1 - Multiple Authenticated Stored Cross-Site Scripting
High
CVE-2021-24892
Advanced Forms for ACF <= 1.6.8 - Insecure Direct Object Reference
Medium
CVE-2020-15299
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme <= 2.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2020-15038
Coming Soon Page by SeedProd <= 5.1.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-4046
WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-4047
WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-36714
Brizy < 1.0.126 - Authorization Bypass to Settings Updates
High
CVE-2020-13700
ACF to REST API <= 3.2.0 - Insecure direct object reference via permalinks manipulation
Medium
f3b79fab-208f-4354-89ea-508290dcd851
MailerLite – Signup forms <= 1.4.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.