2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-18406 | HIGH | 7.5 | 0.3% | Jun 27, 2023 | An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of ... |
| CVE-2020-18418 | HIGH | 8.8 | 0.3% | Jun 27, 2023 | A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to cre... |
| CVE-2020-20210 | HIGH | 8.8 | 1.0% | Jun 26, 2023 | Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images. |
| CVE-2020-21486 | HIGH | 7.5 | 0.9% | Jun 20, 2023 | SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist f... |
| CVE-2020-21400 | HIGH | 7.2 | 1.1% | Jun 20, 2023 | SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id ... |
| CVE-2020-21366 | HIGH | 8 | 0.3% | Jun 20, 2023 | Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser functio... |
| CVE-2020-21325 | HIGH | 8.8 | 1.3% | Jun 20, 2023 | An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the functi... |
| CVE-2020-21252 | HIGH | 8.8 | 0.4% | Jun 20, 2023 | Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and e... |
| CVE-2020-20969 | HIGH | 7.2 | 6.3% | Jun 20, 2023 | File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_resto... |
| CVE-2020-20919 | HIGH | 7.2 | 1.3% | Jun 20, 2023 | File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensi... |
| CVE-2020-20918 | HIGH | 7.2 | 1.1% | Jun 20, 2023 | An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden par... |
| CVE-2020-20726 | HIGH | 8.8 | 0.7% | Jun 20, 2023 | Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via... |
| CVE-2020-20636 | HIGH | 7.5 | 0.7% | Jun 20, 2023 | SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via th... |
| CVE-2020-20491 | HIGH | 7.2 | 1.1% | Jun 20, 2023 | SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the... |
| CVE-2020-20335 | HIGH | 7.5 | 1.0% | Jun 20, 2023 | Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote att... |
| CVE-2020-20067 | HIGH | 8.8 | 1.3% | Jun 20, 2023 | File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parame... |
| CVE-2020-36725 | HIGH | 8.1 | 1.1% | Jun 7, 2023 | The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vu... |
| CVE-2020-36720 | HIGH | 7.1 | 0.8% | Jun 7, 2023 | The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.... |
| CVE-2020-36717 | HIGH | 8.8 | 0.5% | Jun 7, 2023 | The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.... |
| CVE-2020-36716 | HIGH | 7.3 | 0.8% | Jun 7, 2023 | The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ... |
| CVE-2020-36710 | HIGH | 7.5 | 0.8% | Jun 7, 2023 | The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are ... |
| CVE-2020-36707 | HIGH | 8.8 | 0.5% | Jun 7, 2023 | The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up ... |
| CVE-2020-36701 | HIGH | 8.8 | 1.5% | Jun 7, 2023 | The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and inclu... |
| CVE-2020-36700 | HIGH | 8.8 | 1.2% | Jun 7, 2023 | The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi... |
| CVE-2020-36696 | HIGH | 7.5 | 1.1% | Jun 7, 2023 | The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing cap... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now