Critical
ec9cd4a8-286e-43d7-8cb6-6cc363800e20
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2020-8934
Site Kit by Google <= 1.7.1 - Sensitive Information Disclosure
High
06bc7a24-eafc-4b06-852e-9b596f107805
Contact Form by WPForms <= 1.6.0.1 - Cross-Site Scripting
Medium
CVE-2020-5579
Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection
Medium
CVE-2020-12832
Simple File List <= 4.2.7 - Arbitrary File Deletion
Medium
CVE-2020-12742
iubenda < 2.3.5 - Failure to Restrict URL Protocol
Medium
CVE-2020-11027
WordPress Core < 5.4.1 - Password Reset Link Non-Expiration
Medium
CVE-2020-12462
Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2020-11930
GTranslate <= 2.8.51 - Reflected Cross Site Scripting
Medium
138e0a38-c922-44d1-9fe6-2439ec32cf39
Rank Math SEO <= 1.0.42.1 - Missing Authorization
High
CVE-2020-11509
WP Lead Plus X <= 0.98 - Stored Cross-Site Scripting
Medium
CVE-2020-11508
WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X <= 0.98 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-15537
Vanguard - Marketplace Digital Products PHP7 <= 2.1 - Cross-Site Scripting
High
CVE-2020-5391
Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery
Critical
CVE-2020-7947
Login by Auth0 <= 3.11.3 - CSV Injection
Medium
a7d0deb3-3d04-4f85-b769-0894d7c6ee7c
Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting
Critical
CVE-2020-11514
Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint
High
CVE-2020-11515
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
Critical
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
High
08115f30-f38b-4c13-803e-5de873f83a17
Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
e91e6101-bd30-4cf1-9a39-23218c3bff6f
Newsletter <= 6.5.3 - CSV Injection
High
CVE-2020-7916
LearnPress <= 3.2.6.6 - Privilege Escalation
High
CVE-2020-28978
Canto <= 1.9.0 - Blind Server-Side Request Forgery via tree.php
Medium
CVE-2020-10195
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.