Medium
CVE-2018-5363
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2018-5361
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Request Forgery
High
CVE-2018-5372
Testimonial Slider < 1.2.5 - SQL Injection
High
CVE-2018-5373
Smooth Slider < 2.8.7 - Authenticated SQL Injection
Medium
79b5883b-a3be-497e-b911-7dc39e7fb418
WordPress Download Manager <= 2.9.6 - Cross-Site Request Forgery
Critical
CVE-2018-5315
WP Events Calendar Plugin <= 1.0 - SQL Injection
High
CVE-2018-5289
GD Rating System <= 2.3 - Directory Traversal
Medium
CVE-2018-5288
GD Rating System <= 2.3 - Cross-Site Scripting
Medium
CVE-2018-5286
GD Rating System <= 2.3 - Cross-Site Scripting
Medium
CVE-2018-5293
GD Rating System <= 2.3 - Cross-Site Scripting
Medium
CVE-2018-5292
GD Rating System <= 2.3 - Cross-Site Scripting
High
CVE-2018-5290
GD Rating System <= 2.3 - Directory Traversal
High
CVE-2018-5291
GD Rating System <= 2.3 - Directory Traversal
High
CVE-2018-5287
GD Rating System <= 2.3 - Directory Traversal
High
CVE-2018-25019
LearnDash LMS <= 2.5.3 - Arbitrary File Upload
High
CVE-2018-5695
WP Job Board <= 4.4.4 - SQL Injection
Medium
CVE-2018-5214
Add Link to Facebook <= 2.3 - Stored Cross-Site Scripting
Medium
dcd463de-ae26-4477-89e1-21f4aada1e86
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion
Medium
CVE-2018-5284
ImageInject <= 1.15 - Cross-Site Scripting
Medium
CVE-2018-25106
NebulaX < 5.0 - Unauthenticated SQL Injection
High
CVE-2018-5285
ImageInject <= 1.15 - Cross-Site Request Forgery
High
CVE-2018-6357
Social Media Widget by Acurax <= 3.2.5 - Cross-Site Request Forgery leading to Cross-Site Scripting via the recordsArray Parameter
Medium
CVE-2018-5213
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-5212
Simple Download Monitor < 3.5.4 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.