CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2018-20989

2019-08-30

N/A

7.5 HIGH

An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.

CVE-2018-20988

2020-08-24

N/A

7.5 HIGH

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.

CVE-2018-20987

2019-08-23

N/A

9.8 CRITICAL

The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.

CVE-2018-20986

2019-08-27

N/A

5.4 MEDIUM

The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.

CVE-2018-20985

2019-08-26

N/A

9.8 CRITICAL

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.

CVE-2018-20984

2020-08-24

N/A

9.8 CRITICAL

The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.

CVE-2018-20983

2019-08-26

N/A

6.1 MEDIUM

The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.

CVE-2018-20982

2019-08-26

N/A

6.1 MEDIUM

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.

CVE-2018-20981

2019-08-26

N/A

9.1 CRITICAL

The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests.

CVE-2018-20980

2019-08-26

N/A

7.5 HIGH

The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.

« Previous 1 … 1,980 1,981 1,982 1,983 1,984 … 11,258 Next »