Medium
CVE-2017-17096
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
fff9fee5-3dca-447d-b7a8-981a5818ec12
Simple Events Calendar < 1.3.6 - Authenticated (Admin+) SQL Injection
High
CVE-2017-18597
JTRT Responsive Tables < 4.1.2 - SQL Injection
Medium
CVE-2017-18524
Football Pool < 2.6.5 - Cross-Site Scripting
High
2330005e-c3ab-4556-aba9-f194a1ace329
WP Events <= 2.3.4 - SQL Injection
Medium
227886e8-99d9-49b3-a1a8-b06b02d331bc
Like Button Rating <= 2.5.3 - Arbitrary Settings Change
High
CVE-2017-18580
WordPress Shortcodes Plugin — Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution
Critical
CVE-2017-16510
WordPress Core < 4.8.3 - SQL Injection due to Double Prepare approach
Medium
9b780e28-3254-49d8-9b62-ade1c0a42d8a
Rating Widget Plugin < 2.9.0 - Sensitive Information Disclosure
Medium
CVE-2017-15867
User Login History Plugin <= 1.5.2 - Cross-Site Scripting
High
48f148ee-800d-4c8f-bf43-893ec7961f3a
WordCamp Talks < 1.0.0 Beta3 - CSV Injection
Critical
CVE-2017-15919
Ultimate Form Builder Lite <= 1.3.6 - SQL Injection to PHP Object Injection
Medium
13d16955-056d-45c5-b0d1-891767e866b2
CMS Tree Page View < 1.4 - Missing Authorization Checks
Medium
CVE-2017-15812
Easy Appointments < 1.12.0 - Cross-Site Scripting
Medium
CVE-2017-20183
External Media without Import < 1.0.0 - Reflected Cross-Site Scripting
Critical
b77c3d65-23c0-4bda-afea-9cad00fc04d6
Invite Anyone <= 1.3.18 - PHP Object Injection
Medium
CVE-2017-15810
PopCash Code Integration Tool < 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2017-15811
pootle button <= 1.1.1 - Reflected Cross-Site Scripting
High
CVE-2017-18598
Qards (All Versions) - Stored Cross-Site Scripting
Medium
CVE-2017-18525
Max Mega Menu <= 2.3.8 - Authenticated Cross-Site Scripting
Critical
CVE-2017-18573
Simple Login Log < 1.1.2 - SQL Injection
Medium
CVE-2016-9263
WordPress Core < 4.9.1 - Cross-domain Flash injection
Critical
CVE-2017-18514
Simple Login Log < 1.1.2 - SQL Injection
Medium
CVE-2017-18568
My WP Translate <= 1.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.