High
CVE-2017-14842
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2017-14847
WPAMS - Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection
Critical
CVE-2017-14125
Gallery – Image and Video Gallery with Thumbnails < 1.2.1 - SQL Injection
Critical
CVE-2017-14766
Student Result or Employee Database <= 1.6.3 - Authentication Bypass
Medium
CVE-2017-15079
Smush – Lazy Load Images, Optimize & Compress Images <= 2.7.5 - Directory Traversal
Medium
CVE-2017-14622
2kb Amazon Affiliates Store < 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2017-14718
WordPress Core < 4.8.2 - Cross-Site Scripting via Javascript: and Data: URLs
Medium
CVE-2017-14724
WordPress Core < 4.8.2 - Cross-Site Scripting in oEmbed
Medium
CVE-2017-14720
WordPress Core < 4.8.2 - Cross-Site Scripting via Template Name
Medium
CVE-2017-14722
WordPress Core < 4.8.2 - Directory Traversal via Customizer
Medium
CVE-2017-14726
WordPress Core < 4.8.2 - Cross-Site Scripting via Shortcodes
Medium
CVE-2017-14719
WordPress Core < 4.8.2 - Directory Traversal during unzip
Low
CVE-2017-14725
WordPress Core < 4.8.2 - Open Redirect in Admin Dashboard
Critical
CVE-2017-14723
WordPress Core < 4.8.2 - SQL Injection via Mishandled Placeholders
Medium
CVE-2017-14721
WordPress Core < 4.8.2 - Stored Cross-Site Scripting via Plugin Names
Critical
f71f2096-e4c9-406a-a4e5-0006b380fbaa
VaultPress <=1.9 - Remote Code Execution
Critical
CVE-2017-18583
Post Pay Counter < 2.731 - PHP Object Injection
High
CVE-2017-18584
Post Pay Counter < 2.731 - Arbitrary Settings Change
Medium
CVE-2017-18599
Pinfinity <= 1.9.2 - Reflected Cross-site Scripting
High
ba0fdd81-767a-4858-acdb-e60fd5e15aab
Active Directory Integration <= 1.1.8 - Authenticated (Admin+) SQL Injection
High
CVE-2017-14848
WPHRM - Human Resource Management System < 1.1 - SQL Injection
High
CVE-2017-2551
BackWPup <= 3.4.1 - Unauthenticated Backup Download
Medium
CVE-2017-18577
Mailchimp For WP <= 4.1.7 - Cross-Site Scripting
Medium
2a9bf519-bc55-411b-836a-fb394e317396
Caldera Forms <= 1.5.4 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.