Medium
94e9a982-a46d-4dda-9145-e7f74cf09820
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
Medium
7c4797a6-43c1-4183-95ec-4e150a1d774a
Google Analytics Dashboard <= 2.1.1 - Reflected Cross-Site Scripting
Critical
7af05793-b495-4cad-842b-f168d0dc8253
Analytics Stats Counter Statistics <= 1.2.2.5 - Unauthenticated PHP Object Injection
Medium
7ad6b011-ffe0-4548-b8e8-d03508960413
Alpine Photo Tile for Instagram < 1.2.10 - Reflected Cross-Site Scripting
High
5f2f34e1-3b08-4e23-a29b-21e61e6a6063
Admin Custom Login <= 2.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
5954369b-ff1b-40ff-a20d-1b2b237a6f42
WP-SpamFree Anti-Spam <= 2.1.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2017-20056
User Login Log <= 2.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
37052cb9-8479-4004-9161-65f37028ae10
Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2017-20054
Contact Form Manager <= 1.4.3 - Cross-Site Scripting
High
CVE-2017-20090
Global Content Blocks <= 2.1.5 - Cross-Site Request Forgery
High
CVE-2017-18572
GNUCommerce < 1.4.2 - Stored Cross-Site Scripting
Medium
CVE-2017-20055
Contact Form Plugin <= 4.0.1 - Stored Cross-Site Scripting
Medium
CVE-2017-1000038
Relevanssi – A Better Search <= 3.5.7.1 - Stored Cross-Site Scripting
Critical
CVE-2017-6104
Wordpress Plugin Mobile App Native 3.0 <= 3.0 - Arbitrary File Upload
High
CVE-2017-18614
Kama Click Counter <= 3.4.9 - Blind SQL Injection
Medium
CVE-2017-18615
Kama Click Counter <= 3.4.9 - Cross-Site Scripting
Unrated
411
GPS Tools - SQL Injection
High
CVE-2017-18521
Democracy Poll <= 5.3.6 - Cross-Site Request Forgery
Medium
CVE-2017-18591
GD Rating System < 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-9910
Cross-site Scripting in html5lib
Medium
CVE-2016-9909
Improper Neutralization of Input During Web Page Generation in html5lib
Medium
CVE-2017-18520
Democracy Poll < 5.4 - Cross-Site Scripting
Unrated
407
JomWall - SQL Injection
Medium
CVE-2017-6103
AnyVar <= 0.1.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.