Medium
45e61d76-085d-48ba-b5ae-cc75f91d1250
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2019-15647
WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 1.3.5 - Remote Code Execution
High
CVE-2019-10673
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
Critical
05c40628-b8fc-48ff-8819-c0955d69fce0
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor
Critical
CVE-2019-25141
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
Critical
CVE-2019-25217
SiteGround Optimizer <= 5.0.12 - Missing Authorization
Medium
CVE-2019-18834
WooCommerce Subscriptions < 2.6.3 - Stored Cross-Site Scripting
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2019-8943
WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion
High
CVE-2019-8942
WordPress Core < 5.0.1 - Remote Code Execution
Medium
CVE-2019-7411
Launcher: Coming Soon & Maintenance Mode < 1.0.11 - Stored Cross-Site Scripting
Medium
5eab8a5d-8eb8-495f-a953-b468360cc5d5
Advanced Custom Fields <= 5.7.11 - PHP Object Injection
Medium
CVE-2019-9909
GiveWP <= 2.3.0 - Cross-Site Scripting
Medium
CVE-2019-9646
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
High
a67eb1fc-4762-4bdc-b0a0-c043c36659d0
NextGen Gallery <= 3.1.5 - PHP Object Injection
Critical
bbd1e68f-1f84-40d6-9ecd-34280c3c5099
Yet Another Stars Rating <= 1.8.6 - Unauthenticated PHP Object Injection
Medium
95ad0139-eb12-4c02-95fb-cd19b6a6ab02
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
Critical
CVE-2019-15322
Shortcode Factory <= 2.7 - Local File Inclusion
Medium
761a4801-fc4a-40a0-b5aa-303d88a87062
User Registration <= 1.5.5 - Cross-Site Scripting
Medium
CVE-2019-1000003
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery
High
b96f40fe-3ffa-4fc5-b51a-ff3771224bd5
WP Job Manager <= 1.31.2 - PHP Object Injection via PHAR Deserialization
Critical
CVE-2019-15025
Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection
Critical
CVE-2018-20156
WP Maintenance Mode <= 2.0.6 - Remote Code Execution
Medium
CVE-2018-20150
WordPress Core < 5.0.1 Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.