High
CVE-2020-11971
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
ghsa-9vxv-wpv4-f52p
Information leakage in Error Handler
Medium
ghsa-f6p7-8xfw-fjqq
Authenticated Stored XSS in Administration
Critical
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Medium
CVE-2021-29506
Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
Critical
CVE-2021-29508
Insecure deserialization in Wire
Medium
ghsa-7h5v-85w9-pq6c
Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint
Medium
CVE-2021-24421
WP JobSearch <= 1.7.3 - Stored Cross-Site Scripting
High
CVE-2021-24340
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
High
CVE-2021-24337
Video Embed <= 1.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2021-24336
FlightLog <= 3.0.2 - Authenticated (Editor+) SQL Injection
High
CVE-2021-29505
XStream is vulnerable to a Remote Command Execution attack
High
CVE-2021-32620
XWiki users registered with email verification can self re-activate their disabled accounts
High
CVE-2021-32621
Script injection without script or programming rights through Gadget titles
Medium
CVE-2020-7765
Uncontrolled Resource Consumption in firebase
High
CVE-2020-28268
Prototype pollution in controlled-merge
Medium
CVE-2020-7680
Cross-site Scripting in docsify
Medium
CVE-2020-7696
Credential leak in react-native-fast-image
Critical
CVE-2020-7684
Path traversal in rollup-plugin-serve
High
CVE-2020-8186
Injection and Command Injection in devcert
Medium
CVE-2020-7690
Cross-site scripting in jspdf
Medium
CVE-2020-8176
Cross-site scripting in @shopify/koa-shopify-auth
Medium
CVE-2020-15500
Cross-site scripting in TileServer GL
Medium
CVE-2020-7688
OS Command Injection in mversion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.