Medium
CVE-2018-6466
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2018-6467
flickrRSS <= 5.3.1 - Cross-Site Request Forgery
Medium
CVE-2018-6468
flickrRSS <= 5.3.1 - Cross-Site Scripting via flickrRSS_id
High
CVE-2018-6389
WordPress Core < 5.0 - Denial of Service
Medium
CVE-2018-6465
PropertyHive < 1.4.15 - Cross-Site Scripting
Critical
bb6cd3a6-565e-4acf-82f0-25e85f0678bb
User Control <= 2.1.0 - SQL Injection
Critical
607c20b1-f8da-4f3f-a070-abdae64c8fc8
Image Slider <= 1.1.95 - SQL Injection
Medium
45ba8203-a8a0-4330-a264-c2f555d09ef0
Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting
High
CVE-2018-6195
Splashing Images <= 2.1 - PHP Object Injection
Medium
CVE-2018-6194
Splashing Images < 2.1.1 - Cross-Site Scripting
High
5278e8d4-d23e-47ce-b920-dfb7ec56387c
Health Check & Troubleshooting <= 1.2.3 - Missing Authorization Checks
High
CVE-2018-6015
Email Subscribers & Newsletters <= 3.4.7 - Unauthenticated Subscriber Download
Medium
CVE-2018-5657
Coming Soon <= 1.1.18 - Stored Cross-Site Scripting
High
0c58c1c6-cdda-463c-9a76-4ace96138dcb
Google Forms < 0.92 - Unauthenticated Server Side Request Forgery
Medium
CVE-2018-6001
Soundy Audio Playlist <= 4.6 - Cross-Site Scripting
Medium
8247c654-0082-4677-a0a6-b90a0256de81
Smash Balloon Social Photo Feed <= 1.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2018-6002
Soundy Background Music <= 3.9 - Cross-Site Scripting
Medium
0d6af3cd-1a92-428f-a51c-f01a3ba6ebae
Enfold - Responsive Multi-Purpose Theme < 4.2.1 - Information Exposure
Medium
CVE-2018-21014
BuddyBoss Media <= 3.2.3 - Stored Cross-Site Scripting
Medium
3737d7a0-76d6-4292-aa31-6ee2cb0e9575
YITH WooCommerce Wishlist <= 2.1.2 - SQL Injection
Medium
CVE-2018-5776
WordPress Core < 4.9.2 - Authenticated Cross-Site Scripting
Medium
CVE-2018-20983
Perfect Images <= 5.2.2 - Cross-Site Scripting
High
CVE-2018-5673
Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Request Forgery
Medium
CVE-2018-5660
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via coming-soon_sub_title parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.