High
CVE-2020-28478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2020-28480
Prototype pollution in JointJS
High
CVE-2021-20190
Deserialization of untrusted data in jackson-databind
Unrated
drupal-core-2021-001
Drupal core - SA-CORE-2021-001
Medium
d5df75f8-1250-4b79-a796-9146d3037bec
Under Construction <= 3.85 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24241
Advanced Custom Fields Pro <= 5.9.0 - Reflected Cross-Site Scripting
Critical
860e70be-2ccd-4d4d-b0d9-bde8d163c211
123ContactForm for WordPress <= 1.5.6 - Arbitrary File Upload
High
7d7da9c3-dc46-4c61-8737-052844939e93
123ContactForm for WordPress <= 1.5.6 - Arbitrary Post Creation
Medium
CVE-2018-8092
CSV Injection vulnerability with exported contact lists in Mautic
Medium
CVE-2018-11200
XSS vulnerability in company name field in Mautic
Medium
CVE-2017-1000488
Inline JS XSS vulnerability in Mautic
High
CVE-2018-10189
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
High
CVE-2017-1000489
Disabled users able to log in with third party SSO plugin
Medium
CVE-2018-8071
XSS vulnerability in theme config file in Mautic
Medium
CVE-2018-11198
XSS vulnerability in Author URL of themes in Mautic
Medium
CVE-2017-1000490
Mautic users able to download any files from server using filemanager
Critical
CVE-2020-35124
XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic
High
CVE-2021-21263
Query Binding Exploitation
Critical
6cc5f274-6e71-47a1-b4ec-9b3ba46fd7bf
123ContactForm for WordPress <= 1.5.6 - Validation Bypass via Plugin Verification
High
22f79a03-9195-4d5d-a189-9b5e1d3307c8
Contact Form 7 Database Addon <= 1.2.5.3 - SQL Injection
Medium
CVE-2020-28473
bottle HTTP Request smuggling
High
CVE-2021-24142
301 Redirects - Easy Redirect Manager < 2.51 - SQL Injection
Medium
CVE-2021-24124
WP Shieldon <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24339
Pods <= 2.7.26 - Authenticated Stored Cross-Site Scripting via Menu Label field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.