2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-20697 | MEDIUM | 4.8 | 0.5% | Jun 20, 2023 | Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain... |
| CVE-2020-20502 | MEDIUM | 6.5 | 0.5% | Jun 20, 2023 | Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check f... |
| CVE-2020-20070 | MEDIUM | 6.1 | 0.6% | Jun 20, 2023 | Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via ... |
| CVE-2020-22402 | MEDIUM | 6.1 | 0.4% | Jun 14, 2023 | Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive informa... |
| CVE-2020-36732 | MEDIUM | 5.3 | 1.1% | Jun 12, 2023 | The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer... |
| CVE-2020-36731 | MEDIUM | 6.1 | 1.3% | Jun 7, 2023 | The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Set... |
| CVE-2020-36729 | MEDIUM | 4.3 | 0.7% | Jun 7, 2023 | The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'tw... |
| CVE-2020-36723 | MEDIUM | 5.3 | 1.6% | Jun 7, 2023 | The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions ... |
| CVE-2020-36722 | MEDIUM | 4.8 | 0.7% | Jun 7, 2023 | The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 du... |
| CVE-2020-36721 | MEDIUM | 6.5 | 1.0% | Jun 7, 2023 | The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti... |
| CVE-2020-36715 | MEDIUM | 4.6 | 0.7% | Jun 7, 2023 | The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on se... |
| CVE-2020-36712 | MEDIUM | 5.3 | 0.7% | Jun 7, 2023 | The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and incl... |
| CVE-2020-36711 | MEDIUM | 5.4 | 0.6% | Jun 7, 2023 | The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up... |
| CVE-2020-36709 | MEDIUM | 4.8 | 0.6% | Jun 7, 2023 | The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in ve... |
| CVE-2020-36704 | MEDIUM | 5.4 | 0.5% | Jun 7, 2023 | The Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the frui... |
| CVE-2020-36703 | MEDIUM | 5.4 | 0.5% | Jun 7, 2023 | The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG image uploads in... |
| CVE-2020-36702 | MEDIUM | 4.3 | 0.4% | Jun 7, 2023 | The Ultimate Addons for Gutenberg plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to,... |
| CVE-2020-36699 | MEDIUM | 4.3 | 0.8% | Jun 7, 2023 | The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks... |
| CVE-2020-36697 | MEDIUM | 6.5 | 0.9% | Jun 7, 2023 | The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up ... |
| CVE-2020-29547 | MEDIUM | 5.9 | 0.8% | May 29, 2023 | An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 ... |
| CVE-2020-36694 | MEDIUM | 6.7 | 0.4% | May 21, 2023 | An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proces... |
| CVE-2020-18280 | MEDIUM | 6.1 | 0.4% | May 9, 2023 | Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the E... |
| CVE-2020-22334 | MEDIUM | 6.5 | 0.4% | May 8, 2023 | Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via c... |
| CVE-2020-21038 | MEDIUM | 6.1 | 0.5% | May 8, 2023 | Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php. |
| CVE-2020-19660 | MEDIUM | 6.1 | 0.4% | May 8, 2023 | Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url valu... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now