Medium
CVE-2017-5490
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2017-5489
WordPress Core < 4.7.1 - Cross-Site Request Forgery via Uploading Flash File
High
CVE-2017-5492
WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing
Medium
CVE-2017-5487
WordPress Core < 4.7.1 - Information Disclosure
Medium
CVE-2017-5493
WordPress Core < 4.7.1 - Weak Multi-Site Activation Key for User and Site Signup
High
a646a582-7174-4172-a193-c1606c43e6a5
Responsive Poll < 1.7.6 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
cadd47e9-1d5b-4f04-8421-7707dad53ea6
Google Forms <= 0.90 - Unauthenticated PHP Object injection
Medium
e7d4830b-f60a-4556-b40f-1bf9d5a296ad
Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses
Medium
CVE-2017-1000226
Stop User Enumeration plugin <1.3.9 - User Enumeration
Critical
f31bf9cd-fbf3-4f7a-bddd-ddd44c899710
WordPress Ad Widget <= 2.11.0 - Local File Inclusion
Medium
CVE-2017-6514
WordPress Core < 4.7.2 - Path Disclosure
Medium
9d2345d2-0bcf-46fc-a857-0ec10a1b1c26
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure
High
CVE-2016-10927
Nelio AB Testing < 4.5.11 - Server-Side Request Forgery
Critical
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
High
57837060-433f-471c-9413-6d9b95b69f2a
Image Slider < 1.1.90 - Arbitrary File Deletion
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Medium
76a4dbcd-b3f3-48e9-8175-c701837ac2ae
Chained Quiz <= 0.9.8 - Cross-Site Scripting
Medium
CVE-2016-10938
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery
High
CVE-2016-10940
ZM Gallery <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2016-10939
Xtreme Locator Dealer Locator Plugin <= 3.0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2016-10943
ZX_CSV Upload <= 1 - Authenticated (Admin+) SQL Injection
Medium
4aae4571-671a-46d7-b490-6cd0feced0af
WP Private Messages <= 1.0.1 - Authenticated SQL Injection
High
CVE-2016-11085
Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2016-10942
Podlove Podcast Publisher < 2.3.16 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.