Medium
CVE-2018-5664
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2018-5663
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via button_text_link parameter
Medium
CVE-2018-5212
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
Critical
cacd31bd-ccc6-49fa-89f1-09f3c5cd9072
Captcha 4.3.6 - 4.4.4 - Plugin Backdoor
Medium
CVE-2017-17780
Clockwork SMS Plugins - Multiple Versions - Cross-Site Scripting
Medium
CVE-2017-17451
WP Mailster < 1.5.5 - Cross-Site Scripting
High
CVE-2017-18596
Elementor Website Builder <= 1.7.12 - Missing Authorization
Medium
CVE-2017-18495
Clockwork SMS Notfications < 2.4.2 - Cross-Site Scripting
Medium
CVE-2018-0511
WP Retina 2x <= 5.2.0 - Cross-Site Scripting
Medium
CVE-2017-16842
Yoast SEO <= 5.7.1 - Reflected Cross-Site Scripting
High
CVE-2017-18356
WooCommerce <= 3.2.3 - Authenticated PHP Object Injection
Medium
5c8a4708-eb74-45e1-ba47-e245491a8c2f
WP Mail Logging <= 1.8.2 - Cross-Site Scripting
Medium
3cf570e4-7cae-4adc-ac3e-84225d74da39
Email Log <= 2.2.2 - Stored Cross-Site Scripting
High
1de36458-d7e5-43cf-af40-0fd7a6eea5bb
WP Support Plus Responsive Ticket System <= 8.0.7 - Arbitrary File Upload
Critical
CVE-2017-16562
UserPro <= 4.9.17 - Authentication Bypass
Critical
b77c3d65-23c0-4bda-afea-9cad00fc04d6
Invite Anyone <= 1.3.18 - PHP Object Injection
Medium
CVE-2016-9263
WordPress Core < 4.9.1 - Cross-domain Flash injection
Critical
CVE-2017-20208
RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection
Critical
74a26e81-c063-4590-abe8-6cac9ec62316
MarketPress <= 3.2.6 - Unauthenticated PHP Object Injection
Medium
CVE-2017-18586
Insert Pages < 3.2.4 - Authenticated Directory Traversal
Critical
CVE-2017-14125
Gallery – Image and Video Gallery with Thumbnails < 1.2.1 - SQL Injection
Medium
CVE-2017-18577
Mailchimp For WP <= 4.1.7 - Cross-Site Scripting
Medium
CVE-2017-15375
WPJobBoard <= 4.5.1 - Cross-Site Scripting
Medium
7cc86970-7e63-47d0-9971-ddd0fc992a5a
AddToAny Share Buttons <= 1.7.14 - HTTP Host Header Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.