High
4057bfcf-eb96-4610-93ed-8ff1cca7506d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2019-14680
Admin renamer extended <= 3.2.1 - Cross-Site Request Forgery
High
CVE-2019-5983
HTML5 Maps <= 1.6.5.6 - Cross-Site Request Forgery
Medium
CVE-2019-14946
Ultimate Member <= 2.0.51 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Medium
CVE-2019-14947
Ultimate Member <= 2.0.51 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Medium
CVE-2019-15838
Custom 404 Pro <= 3.2.7 - Reflected Cross-Site Scripting
High
CVE-2019-5984
Custom CSS Pro <= 1.0.3 - Cross-site Request Forgery
Medium
CVE-2019-14785
CP Contact Form with PayPal <= 1.3.01 - Cross-Site Scripting
Medium
CVE-2019-14784
CP Contact Form with PayPal <= 1.3.01 - Cross-Site Scripting
High
CVE-2019-14681
Deny All Firewall <= 1.1.6 - Cross-Site Request Forgery
Medium
645552ef-84aa-4f51-93d4-cb85c43fed58
Photospace Responsive <= 1.1.7 - Cross-Site Scripting
Medium
CVE-2019-14683
Import and export users and customers <= 1.14.1.3 - Cross-Site Request Forgery leading to attachment deletion & Path Traversal
Medium
CVE-2019-14786
Rank Math SEO <= 1.0.27 - Authenticated Settings Reset via reset-cmb Parameter
Medium
CVE-2018-21270
Out-of-bounds Read in stringstream
Critical
ghsa-28xh-wpgr-7fm8
Command Injection in open
Medium
ghsa-x9p2-fxq6-2m5f
Reverse Tabnapping in swagger-ui
Medium
ghsa-qx4v-6gc5-f2vv
Regular Expression Denial of Service
Medium
CVE-2019-15327
Import and export users and customers <= 1.14.1.2 - Cross-Site Scripting
High
CVE-2019-15326
Import and export users and customers <= 1.14.2.1 - Directory Traversal
High
CVE-2019-25147
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link
Critical
CVE-2019-15839
Sina Extension for Elementor < 2.2.1 - Local File Inclusion
High
CVE-2019-5979
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery
Low
ghsa-4vr3-9v7h-5f8v
Low severity vulnerability that affects Gw2Sharp
High
d0999244-4097-4e8c-8f7e-4accd7727d69
Dropshix < 4.0.14 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.