High
3e8a25d1-4bd8-4ecf-ac10-a333abaac328
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2018-17583
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action
Medium
CVE-2018-17585
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via wpFastestCachePage options, wpFastestCachePreload_number or wpFastestCacheLanguage parameter
Medium
CVE-2018-17586
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via rules[0][content] parameter
High
CVE-2018-17584
WP Fastest Cache <= 0.8.8.5 - Cross-Site Request Forgery via page to wpfastestcacheoptions
High
CVE-2018-18069
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2018-17866
Ultimate Member <= 2.0.27 - Multiple Cross-Site Scripting vulnerabilities
Medium
CVE-2018-18019
Slideshow Gallery <= 1.6.8 - Cross-Site Scripting
High
CVE-2018-18018
Slideshow Gallery <= 1.6.8 - SQL Injection
Medium
CVE-2018-18017
Slideshow Gallery <= 1.6.8 - Cross-Site Scripting
Medium
e7819dbf-fbcc-4dca-8300-b75ec096c541
Wordfence Security – Firewall & Malware Scan <= 7.1.13 - Reflected Cross-Site Scripting and Information Disclosure
High
CVE-2018-20972
Companion Auto Update <= 3.2.0 - Cross-Site Request Forgery
Critical
CVE-2018-20973
Companion Auto Update <= 3.2.0 - Local File Inclusion
Medium
CVE-2019-17213
WebARX <= 1.3.0 - Stored Cross-Site Scripting
High
CVE-2019-17214
WebARX <= 1.3.0 - Firewall Bypass
Critical
CVE-2018-17573
Wp-Insert <= 2.4.2 - Arbitrary File Upload
Medium
3f3c556d-8baf-4d75-a331-51b76ee084ee
Breadcrumb NavXT <= 6.1.0 - Sensitive Data Exposure
Medium
eb613de8-d298-471f-b585-2da3b5500f10
FV Flowplayer Video Player <= 7.2.0.727 - Reflected Cross-Site Scripting
High
6b8655a6-f410-480d-8c45-2527b53fa129
Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection
Medium
5438a03c-9081-4e1a-ad81-2e7a0f180e84
WP Mail SMTP by WPForms <= 1.3.3 - Unspecified Cross-Site Scripting
High
CVE-2018-16299
Localize My Post <= 1.0 - Directory Traversal
Critical
CVE-2018-16283
微信群发助手-Wechat Broadcast <= 1.2.0 - Directory Traversal
Medium
CVE-2018-1002005
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting
Medium
CVE-2018-1002001
Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.