Medium
CVE-2017-18495
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2017-18555
Booking Calendar - Clockwork SMS <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2018-0511
WP Retina 2x <= 5.2.0 - Cross-Site Scripting
Medium
CVE-2017-16842
Yoast SEO <= 5.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2017-18519
WP Customer Area <= 7.4.2 - Cross-Site Scripting
High
CVE-2017-16955
InLinks <= 1.1 - Authenticated SQL Injection
Medium
CVE-2017-17043
Emag Marketplace Connector < 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2017-17059
amtyThumb posts <= 8.2.0 - Cross-Site Scripting
High
CVE-2017-18356
WooCommerce <= 3.2.3 - Authenticated PHP Object Injection
High
a0413f69-7251-4c01-b2e0-c8638d797652
AMP ToolBox <= 2.1.1 - Cross-Site Scripting
Medium
CVE-2017-18011
Affiliate Ads for Clickbank Products < 1.7 - Stored Cross-Site Scripting
Medium
c0e6f20a-3a5c-4782-9852-9891b93d765f
Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting
High
CVE-2017-20192
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
High
5097da41-b5e9-4e07-a135-83a7d889fe9b
bbPress < 2.5.13 - Unauthenticated Blind SQL Injection
High
27616d9e-c1eb-489f-ace7-76c0e5be2597
Formidable Form Builder < 2.05.03 - SQL Injection
Medium
CVE-2017-20194
Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure
Medium
5c8a4708-eb74-45e1-ba47-e245491a8c2f
WP Mail Logging <= 1.8.2 - Cross-Site Scripting
Medium
3cf570e4-7cae-4adc-ac3e-84225d74da39
Email Log <= 2.2.2 - Stored Cross-Site Scripting
High
1de36458-d7e5-43cf-af40-0fd7a6eea5bb
WP Support Plus Responsive Ticket System <= 8.0.7 - Arbitrary File Upload
Critical
CVE-2017-16562
UserPro <= 4.9.17 - Authentication Bypass
Medium
CVE-2017-16758
Ultimate Instagram Feed – WordPress Plugin < 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2017-18499
Simple Membership <= 3.5.6 - Cross-Site Scripting
Medium
CVE-2017-16815
Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting
Medium
d2aea3e1-60cb-4992-a217-4250bed2641e
Ultimate Instagram Feed - WordPress Plugin < 1.3.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.