2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36722 | MEDIUM | 4.8 | 0.7% | Jun 7, 2023 | The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 du... |
| CVE-2020-36721 | MEDIUM | 6.5 | 1.0% | Jun 7, 2023 | The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti... |
| CVE-2020-36720 | HIGH | 7.1 | 0.8% | Jun 7, 2023 | The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.... |
| CVE-2020-36719 | CRITICAL | 9.8 | 4.3% | Jun 7, 2023 | The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activ... |
| CVE-2020-36718 | CRITICAL | 9.8 | 1.7% | Jun 7, 2023 | The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inclu... |
| CVE-2020-36717 | HIGH | 8.8 | 0.5% | Jun 7, 2023 | The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1.... |
| CVE-2020-36716 | HIGH | 7.3 | 0.8% | Jun 7, 2023 | The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ... |
| CVE-2020-36715 | MEDIUM | 4.6 | 0.7% | Jun 7, 2023 | The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on se... |
| CVE-2020-36713 | CRITICAL | 9.8 | 1.6% | Jun 7, 2023 | The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This... |
| CVE-2020-36712 | MEDIUM | 5.3 | 0.7% | Jun 7, 2023 | The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and incl... |
| CVE-2020-36711 | MEDIUM | 5.4 | 0.6% | Jun 7, 2023 | The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up... |
| CVE-2020-36710 | HIGH | 7.5 | 0.8% | Jun 7, 2023 | The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are ... |
| CVE-2020-36709 | MEDIUM | 4.8 | 0.6% | Jun 7, 2023 | The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in ve... |
| CVE-2020-36708 | CRITICAL | 9.8 | 65.3% | Jun 7, 2023 | The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.... |
| CVE-2020-36707 | HIGH | 8.8 | 0.5% | Jun 7, 2023 | The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up ... |
| CVE-2020-36704 | MEDIUM | 5.4 | 0.5% | Jun 7, 2023 | The Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the frui... |
| CVE-2020-36703 | MEDIUM | 5.4 | 0.5% | Jun 7, 2023 | The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG image uploads in... |
| CVE-2020-36702 | MEDIUM | 4.3 | 0.4% | Jun 7, 2023 | The Ultimate Addons for Gutenberg plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to,... |
| CVE-2020-36701 | HIGH | 8.8 | 1.5% | Jun 7, 2023 | The Page Builder: KingComposer plugin for WordPress is vulnerable to Arbitrary File Uploads in versions up to, and inclu... |
| CVE-2020-36700 | HIGH | 8.8 | 1.2% | Jun 7, 2023 | The Page Builder: KingComposer plugin for WordPress is vulnerable to authorization bypass in versions up to, and includi... |
| CVE-2020-36699 | MEDIUM | 4.3 | 0.8% | Jun 7, 2023 | The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks... |
| CVE-2020-36697 | MEDIUM | 6.5 | 0.9% | Jun 7, 2023 | The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up ... |
| CVE-2020-36696 | HIGH | 7.5 | 1.1% | Jun 7, 2023 | The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing cap... |
| CVE-2020-19028 | HIGH | 7.5 | 1.1% | Jun 5, 2023 | *File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive informat... |
| CVE-2020-29547 | MEDIUM | 5.9 | 0.8% | May 29, 2023 | An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now