Medium
7c312478-0d6e-400b-81c2-172c2c5798ff
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2017-18603
Postman SMTP <= 1.7.2 - Reflected Cross-Site Scripting
Critical
bbeb32a8-5acf-4a68-859d-98652e8ff5d1
Email Before Download <= 3.6 - SQL Injection
Medium
52dc69e7-d4c0-492e-a334-54464fc963fd
Email Before Download <= 3.6 - SMTP Header Injection
Critical
0d4e3560-2208-4122-812e-0c506fe45126
Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion
Medium
d2e040bd-df5f-4b40-bc7b-9521f224c297
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
High
CVE-2017-18523
EELV Newsletter <= 4.6.0 - Cross-Site Request Forgery
High
CVE-2017-1000170
JQueryFileTree <= 2.1.5 - Directory Traversal
Critical
cc550fd9-c332-4a40-b4a9-166d5ffebc76
My Geo Posts Free <= 1.2 - PHP Object Injection
Critical
4b40e33b-4aa8-4378-b044-a8a636d34f73
Referrer Detector <= 4.2.1.0 - PHP Object Injection
Critical
17ccf3f5-ac71-4827-bf11-9a5199f8752e
AJAX Random Posts <= 0.3.3 - PHP Object Injection
Medium
f3ebaf25-1bd3-4770-b4bd-30de83b31add
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.31 - Arbitrary Wordpress Shortcode Injection
Medium
CVE-2017-7723
Easy WP SMTP <= 1.2.4 - Cross-Site Scripting
Medium
153a9a08-66b3-40fd-963d-93058c863a80
Email Queue by BestWebSoft < 1.1.2 - Reflected Cross-Site Scripting
High
CVE-2017-18504
Twitter Cards Meta <= 2.4.5 - Cross-Site Request Forgery
High
01139cbd-1116-4cf8-bdcb-cb182588d093
BlogVault WordPress Backup Plugin 1.40 - 1.44 - Unauthenticated PHP Object Injection
High
CVE-2017-18543
Invite Anyone < 1.3.16 - Email Injection
Medium
CVE-2017-6955
Invite Anyone <= 1.3.14 - Change of Email Invitation Content
High
02665811-15ba-434c-a4d0-df5402a128f4
Simple Ads Manager <= 2.9.8.125 - Unauthenticated PHP Objection Injection
High
CVE-2017-6578
Mail Masta <= 1.0 - SQL Injection via subscriber_email parameter
Critical
CVE-2017-20247
PICA Photo Gallery <= 1.0 - SQL Injection
High
CVE-2017-1002007
DTracker <= 1.5 - Authorization Bypass
Medium
CVE-2017-18574
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.30 - HTML Injection
High
CVE-2017-6574
Mail Masta Plugin <= 1.0 - SQL Injection via filter_list
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.