High
c006b85d-fc05-41e7-93b2-5a09a21bec1a
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2017-18585
Posts in Page <= 1.2.4 - Authenticated Directory Traversal leading to Local File Inclusion
High
db9cd10e-90c1-48b2-8760-d5fc501fb3ba
Javo Spot < 3.0.0 - Directory Traversal
Medium
CVE-2017-18541
XO Security < 1.5.3 - Cross-Site Scripting
Medium
CVE-2017-9288
Raygun4WP <= 1.8.0 - Reflected Cross-Site Scripting
Critical
CVE-2017-18548
Note Press < 0.1.2 - SQL Injection
Medium
b980b8e2-73e6-4afc-a24c-c7c98283e85b
Translate WordPress with GTranslate <= 2.8.10 - Open Redirect
Medium
51d98277-a1d7-4708-8daf-88948a235375
WP Super Cache <= 1.4.8 - Cross-Site Scripting
Medium
CVE-2017-5612
WordPress Core < 4.7.2 - Cross-Site Scripting
High
CVE-2017-5611
WordPress Core < 4.7.2 - Authenticated SQL Injection
Medium
CVE-2017-5610
WordPress Core < 4.7.2 - Authorization Bypass to Term Disclosure
High
CVE-2017-1001000
WordPress Core < 4.7.2 - Arbitrary Page Modification
Critical
CVE-2016-15004
InfiniteWP Client <= 1.6.0 - Unauthenticated PHP Object Injection
High
CVE-2017-20177
WangGuard < 1.8.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2017-18526
moreAds SE <= 1.4.6 - Cross-Site Scripting
Medium
ec6ea63d-60de-4b3f-8b7c-cbd951c3f737
WangGuard <= 1.7.2 - Reflected Cross-Site Scripting
High
390ee957-f06f-4952-b740-4578c130925f
WP Email Users <= 1.4.4 - SQL Injection
Critical
5804da94-1dee-47f8-930b-c5413d5506b9
Direct Download for Woocommerce < 1.16 - Local File Inclusion
Medium
CVE-2017-18576
Event Notifier <= 1.2.0 - Cross-Site Scripting
Medium
CVE-2017-18536
Stop User Enumeration <= 1.3.7 - Cross-Site Scripting
Medium
CVE-2017-18612
WP Whois Domain <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-10892
Chained Quiz Plugin < 1.0 - Cross-Site Scripting
High
CVE-2017-5491
WordPress Core < 4.7.1 - Authorization Bypass
Medium
CVE-2017-5488
WordPress Core < 4.7.1 - Cross-Site Scripting via Name and Version Header of Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.