High
CVE-2018-20151
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2018-20148
WordPress Core < 5.0.1 - PHP Object Injection
High
CVE-2019-15330
WebP Express < 0.14.11 - Arbitrary File Read
High
35246286-c0df-4f82-84b8-ebefe966a4dc
Contact Form by WPForms <= 1.4.8 - Reflected Cross-Site Scripting
High
15654ff3-2e61-44d2-ae3f-4a353db320cb
Smush – Lazy Load Images, Optimize & Compress Images <= 3.0.0 - Authenticated PHAR Deserialization
Medium
CVE-2018-19796
Ninja Forms Contact Form <= 3.3.19 - Authenticated Open Redirect
Critical
CVE-2018-21007
Woo Confirmation Email < 3.2.0 - Improper Access Control
Critical
CVE-2018-20984
Patreon WordPress < 1.2.2 - PHP Object Injection
Critical
02bb12db-0bc9-4c13-918f-1f90b500c165
PropertyHive < 1.4.26 - Remote Code Execution
Medium
CVE-2018-19287
Ninja Forms Contact Form <= 3.3.17 - Cross-Site Scripting via begin_date, end_date, or form_id Parameter
High
CVE-2018-5310
Media from FTP Plugin < 9.85 - Directory Traversal
High
bd302d8e-bba1-4fa1-bcbc-591d894ca1d6
Simple Link Directory <= 5.6.0 - PHP Object Injection
Medium
CVE-2018-19370
Yoast SEO <= 9.1.0 - Race Condition to Remote Code Execution
High
CVE-2018-20714
WooCommerce <= 3.4.5 - WooCommerce File Deletion
Critical
CVE-2019-1010209
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.4.13 - Arbitrary File Upload
High
52c24f18-832b-4416-a148-a23e38b257e0
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
Medium
6a0c948b-7f14-450e-858a-77c1d3dd0761
All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting
Medium
e7819dbf-fbcc-4dca-8300-b75ec096c541
Wordfence Security – Firewall & Malware Scan <= 7.1.13 - Reflected Cross-Site Scripting and Information Disclosure
High
6b8655a6-f410-480d-8c45-2527b53fa129
Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection
Medium
5438a03c-9081-4e1a-ad81-2e7a0f180e84
WP Mail SMTP by WPForms <= 1.3.3 - Unspecified Cross-Site Scripting
Medium
CVE-2018-1002009
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
Medium
5caa9c7c-07b3-4288-803f-f60e5b428953
Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.4.7.2 - Stored Cross-Site Scripting
High
CVE-2018-1000773
WordPress Core < 5.0.1 - PHAR Unserialization
High
cdac6080-5e23-488d-8b3c-de0c6c92e344
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.