Medium
10a0abd6-1905-4a90-8488-29d44df7aeb9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
High
CVE-2018-19456
WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure
Critical
CVE-2019-25224
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
Medium
CVE-2019-14949
WP Database Backup <= 5.1.1 - Cross-Site Scripting
Critical
f8035ed9-d267-44da-9de4-cf3d6ece7059
WP Database Backup <= 5.1.2 - Unauthenticated Settings Update to Remote Code Execution
High
1c307340-2911-46b9-9c90-0a7ebad8a0e9
Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion
Medium
5083509e-84e4-4bd3-9023-b458312b1886
Jetpack < 7.0.1 - Cross-Site Scripting
Medium
d703abc2-3269-42b2-a75c-d163df62260d
Jetpack <= 6.4.2 - Cross-Site Scripting via post_meta
Medium
868b7492-c550-4c06-adb0-3478eb7d9b55
CSS & JavaScript Toolbox <= 8.4.1 - Information Exposure
Critical
CVE-2018-17207
Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution
Medium
CVE-2018-7543
Duplicator <= 1.2.32 - Cross-Site Scripting
Medium
CVE-2017-16815
Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting
High
CVE-2017-2551
BackWPup <= 3.4.1 - Unauthenticated Backup Download
Medium
CVE-2017-10837
BackupGuard <= 1.1.46 - Reflected Cross-Site Scripting
Medium
CVE-2017-18488
Backup Guard <= 1.1.46 - Cross-Site Scripting
Medium
CVE-2017-18593
UpdraftPlus <= 1.13.4 - Stored Cross-Site Scripting
Medium
9c9feabc-6a8d-4367-8ea2-cc5284dbc041
All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting
Critical
fc6dcf93-7f1f-4e87-8ba5-852d23b1f0fd
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack
Critical
f4703ca7-0677-4128-b9b7-31132ff1804d
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - CSV Injection
Critical
CVE-2017-1002016
flickr-picture-backup <= 0.7 - Arbitrary file upload
Medium
35293a82-b535-47a2-8a34-e54fe836ca89
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-10706
Jetpack <= 4.0.2 - Cross-Site Scripting
High
01139cbd-1116-4cf8-bdcb-cb182588d093
BlogVault WordPress Backup Plugin 1.40 - 1.44 - Unauthenticated PHP Object Injection
Medium
9d2345d2-0bcf-46fc-a857-0ec10a1b1c26
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.