2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-22151 | CRITICAL | 9.8 | 1.2% | Jul 3, 2023 | Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file ... |
| CVE-2020-15730 | — | — | — | Jul 2, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2020-36749 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Easy Testimonials plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,... |
| CVE-2020-36748 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Dokan plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.8. This... |
| CVE-2020-36747 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Lightweight Sidebar Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and ... |
| CVE-2020-36746 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Menu Swapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.... |
| CVE-2020-36745 | HIGH | 8.8 | 0.4% | Jul 1, 2023 | The WP Project Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including... |
| CVE-2020-36744 | MEDIUM | 4.3 | 0.3% | Jul 1, 2023 | The NotificationX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8... |
| CVE-2020-36743 | MEDIUM | 4.3 | 0.3% | Jul 1, 2023 | The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu... |
| CVE-2020-36742 | MEDIUM | 4.3 | 0.3% | Jul 1, 2023 | The Custom Field Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ... |
| CVE-2020-36741 | MEDIUM | 4.3 | 0.3% | Jul 1, 2023 | The MultiVendorX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.... |
| CVE-2020-36740 | HIGH | 8.8 | 0.4% | Jul 1, 2023 | The Radio Buttons for Taxonomies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and... |
| CVE-2020-36739 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request F... |
| CVE-2020-36738 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Cool Timeline (Horizontal & Vertical Timeline) plugin for WordPress is vulnerable to Cross-Site Request Forgery in v... |
| CVE-2020-36737 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The Import / Export Customizer Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up ... |
| CVE-2020-36736 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The WooCommerce Checkout & Funnel Builder by CartFlows plugin for WordPress is vulnerable to Cross-Site Request Forgery ... |
| CVE-2020-36735 | MEDIUM | 4.3 | 0.4% | Jul 1, 2023 | The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is... |
| CVE-2020-18432 | CRITICAL | 9.8 | 0.7% | Jun 30, 2023 | File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privile... |
| CVE-2020-26710 | HIGH | 7.5 | 0.7% | Jun 29, 2023 | easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers t... |
| CVE-2020-26709 | HIGH | 7.5 | 0.7% | Jun 29, 2023 | py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to exe... |
| CVE-2020-26708 | HIGH | 7.5 | 0.7% | Jun 29, 2023 | requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attacker... |
| CVE-2020-18414 | MEDIUM | 4.8 | 0.4% | Jun 27, 2023 | Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via ... |
| CVE-2020-18409 | MEDIUM | 6.8 | 0.3% | Jun 27, 2023 | Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain... |
| CVE-2020-18404 | MEDIUM | 4.8 | 0.3% | Jun 27, 2023 | An issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS) vulnerability that allows a... |
| CVE-2020-19902 | CRITICAL | 9.8 | 1.6% | Jun 27, 2023 | Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code vi... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now