Medium
CVE-2017-15878
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
a0413f69-7251-4c01-b2e0-c8638d797652
AMP ToolBox <= 2.1.1 - Cross-Site Scripting
Medium
CVE-2017-18011
Affiliate Ads for Clickbank Products < 1.7 - Stored Cross-Site Scripting
Critical
CVE-2017-0906
Recurly vulnerable to SSRF
Medium
c0e6f20a-3a5c-4782-9852-9891b93d765f
Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting
High
CVE-2017-20192
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
High
5097da41-b5e9-4e07-a135-83a7d889fe9b
bbPress < 2.5.13 - Unauthenticated Blind SQL Injection
High
27616d9e-c1eb-489f-ace7-76c0e5be2597
Formidable Form Builder < 2.05.03 - SQL Injection
Medium
CVE-2017-20194
Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
Medium
5c8a4708-eb74-45e1-ba47-e245491a8c2f
WP Mail Logging <= 1.8.2 - Cross-Site Scripting
Medium
3cf570e4-7cae-4adc-ac3e-84225d74da39
Email Log <= 2.2.2 - Stored Cross-Site Scripting
High
1de36458-d7e5-43cf-af40-0fd7a6eea5bb
WP Support Plus Responsive Ticket System <= 8.0.7 - Arbitrary File Upload
Critical
CVE-2017-16764
django_make_app is vulnerable to Code Injection
Critical
CVE-2017-16763
Unsafe deserialization in confire
Critical
CVE-2017-16562
UserPro <= 4.9.17 - Authentication Bypass
Unrated
drupal-contrib-2017-083
drupal/config_perms - SA-CONTRIB-2017-083
Unrated
drupal-contrib-2017-082
drupal/permissions_by_term - SA-CONTRIB-2017-082
Critical
CVE-2017-16618
Unsafe deserialization in owlmixin
Critical
CVE-2017-16616
Unsafe pyyaml load usage in PyAnyAPI
Critical
CVE-2017-16615
Unsafe deserialization in MLAlchemy
Medium
CVE-2017-16758
Ultimate Instagram Feed – WordPress Plugin < 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2017-18499
Simple Membership <= 3.5.6 - Cross-Site Scripting
Medium
CVE-2017-16815
Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting
Medium
d2aea3e1-60cb-4992-a217-4250bed2641e
Ultimate Instagram Feed - WordPress Plugin < 1.3.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.