High
CVE-2017-18598
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2017-18525
Max Mega Menu <= 2.3.8 - Authenticated Cross-Site Scripting
Critical
CVE-2017-18573
Simple Login Log < 1.1.2 - SQL Injection
Medium
CVE-2016-9263
WordPress Core < 4.9.1 - Cross-domain Flash injection
Critical
CVE-2017-18514
Simple Login Log < 1.1.2 - SQL Injection
Medium
CVE-2017-18568
My WP Translate <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2017-18569
My WP Translate <= 1.0.3 - Unprotected AJAX Actions
Medium
CVE-2017-18567
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting
Medium
CVE-2017-18531
Raygun4WP <= 1.8.2 - Cross-Site Scripting
High
CVE-2017-18510
Custom Sidebars <= 3.0.9 - Cross-Site Request Forgery
High
edcc23e0-075a-47e6-979d-7e75eed4337d
Ultimate Product Catalog <= 4.2.21 - Authorization Bypass and Cross-Site Request Forgery
Critical
CVE-2017-20208
RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection
Critical
CVE-2017-20207
Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection
Critical
CVE-2017-20206
Appointments <= 2.2.1 - Unauthenticated PHP Object Injection
Medium
CVE-2017-18506
WooCommerce PDF Invoices & Packing Slips <= 2.0.12 - Cross-Site Scripting
Critical
74a26e81-c063-4590-abe8-6cac9ec62316
MarketPress <= 3.2.6 - Unauthenticated PHP Object Injection
Medium
CVE-2017-18586
Insert Pages < 3.2.4 - Authenticated Directory Traversal
High
CVE-2017-14844
WPGYM - Wordpress Gym Management System (Unknown Version) - SQL Injection
High
CVE-2017-14846
Mojoomla Hospital Management System for WordPress Theme < 22-05-2018 - SQL Injection
Medium
CVE-2017-18560
Content Audit <= 1.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2017-14507
Content Timeline <= 4.4.2 - SQL Injection
Medium
CVE-2017-14751
WP Jobs < 1.7 - Cross-Site Scripting
High
CVE-2017-14843
Mojoomla School Management System (Unspecified Version) - Authenticated (Student+) SQL Injection
High
CVE-2017-14845
WPCHURCH - Church Management System for Wordpress Theme < 13-07-2019 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.