High
CVE-2019-10270
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
3d5dfccd-74ab-4de9-8ea6-58908865086d
Revamp CRM for WooCommerce < 1.0.4 - Local File Inclusion
High
CVE-2019-15865
Breadcrumbs by menu <= 1.0.1 - Cross-Site Request Forgery
High
78bb5e18-5535-4cee-a38b-e38802059ef7
Paid Memberships Pro <= 2.0.5 - Open Redirect
Medium
CVE-2019-12566
WP Statistics <= 12.6.5 - Stored Cross-Site Scripting
Critical
CVE-2019-12498
WP Live Chat Support <= 8.0.32 - Unprotected Functions
High
CVE-2019-15867
Slick Popup <= 1.7.1 - Privilege Escalation
High
CVE-2019-11872
Hustle <= 6.0.7 - Unauthenticated CSV Injection
Critical
CVE-2019-12239
WP Booking System Free version < 1.5.2 - Cross-Site Request Forgery
High
56fce928-108d-4e59-8746-3699a9db427e
User Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Arbitrary Options Update
Medium
CVE-2019-14799
FV Flowplayer Video Player <= 7.3.13.727 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2019-14801
FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection
Medium
CVE-2019-14800
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Information Exposure
High
10e49bdd-3a72-4bb7-ba31-21ba4a5b377f
SAML Single Sign On – SAML SSO Login <= 4.8.75 - Cross-Site Request Forgery
Critical
9729ebf5-ef78-4ef4-81d4-165f422c3847
FV Flowplayer Video Player <= 7.3.14.727 - Unauthenticated SQL Injection
Medium
2b7220a4-7178-42f7-978b-96eae777b134
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Data Exposure
Medium
CVE-2019-15317
GiveWP <= 2.4.6 - Cross-Site Scripting
High
6299876c-9db4-4f8d-897d-9a013a67238c
Register IPs <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2019-9880
WPGraphQL <= 0.2.3 - Information Exposure
High
CVE-2018-19456
WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure
Critical
CVE-2019-11185
WP Live Chat Support Pro <= 8.0.26 - Arbitrary File Upload
Critical
CVE-2019-11223
SupportCandy – Helpdesk & Support Ticket System <= 2.0.0 - Arbitrary File Upload
Medium
CVE-2019-11843
MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter
Critical
CVE-2019-11886
Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.