Medium
CVE-2019-20204
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2019-20203
Postie <= 1.9.40 - Post Submission Spoofing & Stored Cross-Site Scripting
High
CVE-2020-5244
BuddyPress <= 5.1.1 - Sensitive Information Disclosure
High
CVE-2019-20211
CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting
High
f796b282-0012-4d86-914d-72c7707dce42
bbPress Members Only <= 1.2.1 - Cross-Site Request Forgery
Medium
a660b7b8-550e-42d7-b15a-0ab2aa501623
Donorbox <= 7.1.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-19915
301 Redirects - Easy Redirect Manager <= 2.40 - Missing Authorization
High
CVE-2020-6168
Minimal Coming Soon & Maintenance Mode <= 2.10 - Missing Authorization
High
5bbd8851-09ae-40a1-ba88-0a2c439f102d
Ultimate Auction <= 4.0.5 - Cross-Site Request Forgery and Cross-Site Scripting
Medium
CVE-2019-19133
CSS Hero <= 4.0.3 - Reflected Cross-Site Scripting
High
CVE-2019-19979
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-19982
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated Option Creation
Medium
CVE-2019-19981
Email Subscribers & Newsletters <= 4.2.2 - Cross-Site Request Forgery on Settings
Medium
CVE-2019-19985
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated File Download w/ Information Disclosure
Medium
CVE-2019-19980
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization to Test Email
Medium
CVE-2019-19984
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization
High
CVE-2019-20361
Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection
High
CVE-2019-14366
WP SlackSync <= 1.8.5 - Sensitive Information Disclosure
Medium
CVE-2019-17235
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Information Disclosure
High
CVE-2019-17237
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Cross-Site Request Forgery
High
CVE-2019-17234
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2019-17236
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Stored Cross-Site Scripting
Medium
86cb08ae-aa21-4ee6-baed-03429e4d38e2
MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting
High
7886708a-8daa-465b-b820-53bf409e682c
Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.