High
9d1e8703-4ad3-42c5-a20d-f1bd31522a8b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
1bcc6192-b9fa-4444-b06d-2b44d53d9cfe
WP Elegant Testimonial <= 1.1.6 - Cross-Site Scripting
High
CVE-2020-15142
openapi-python-client Arbitrary Code Generation vulnerability
Low
CVE-2020-15141
Path Traversal in openapi-python-client
Medium
d45a4b0b-bb98-4c35-a743-c434946002a2
Responsive Lightbox2 <= 1.0.2 - Cross-Site Scripting
Medium
969b54d4-50db-4a2f-afa1-e22b29af661e
WordPress Colorbox Lightbox Plugin <= 1.1.4 - Stored Cross-Site Scripting
Medium
8223f9dd-1c2d-40bd-a17d-1bb317829d3b
Sell Photo <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2020-35935
Advanced Access Manager <= 6.6.1 - Authenticated Authorization Bypass and Privilege Escalation
High
25f782c4-7ece-47cb-9e64-9c93fd8858e9
WordPress fancybox <= 1.0.2 - Stored Cross-Site Scripting
High
CVE-2020-8205
Server-Side Request Forgery in @uppy/companion
High
CVE-2020-22276
WeForms <= 1.4.7 - CSV injection via form entry
High
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Critical
CVE-2020-17446
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Medium
CVE-2019-6112
Sell Media <= 2.4.1 - Cross-Site Scripting
High
CVE-2020-17495
django-celery-results Stores Sensitive Information In Cleartext
High
ghsa-j7wp-vjj6-cp5m
Cross-Site Scripting in @progress/kendo-angular-editor
High
CVE-2020-7660
Insecure serialization leading to RCE in serialize-javascript
Medium
CVE-2020-12648
Cross-site scripting vulnerability in TinyMCE
Medium
ghsa-q6j3-c4wc-63vw
CSRF tokens leaked in URL by canned query form
Medium
CVE-2020-24316
Admin Menu Plugin <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2020-24314
RSS Feed Widget <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2020-24313
Ultimate Appointment Booking & Scheduling < 1.1.10 - Reflected Cross-Site Scripting
Medium
CVE-2020-17362
Nova Lite < 1.3.9 - Reflected Cross-Site Scripting
High
CVE-2020-15138
Cross-Site Scripting in Prism
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.