Medium
CVE-2017-18566
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2017-18527
Pagination by BestWebSoft <= 1.0.6 - Multiple Cross-Site Scripting
Medium
CVE-2017-18505
BestWebSoft's Twitter < 2.55 - Cross-Site Scripting
Medium
169f2767-da20-4199-9997-438a62f6aee4
reCaptcha by BestWebSoft < 1.28 - Reflected Cross-Site Scripting
Medium
153a9a08-66b3-40fd-963d-93058c863a80
Email Queue by BestWebSoft < 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2017-18501
Social Login by BestWebSoft <= 0.1 - Multiple Cross-Site Scripting
Medium
CVE-2017-18518
SMTP by BestWebSoft <= 1.0.9 - Multiple Cross-Site Scripting
Medium
0f10c476-ce0c-4204-8f68-46c12dac1ade
Featured Posts by BestWebSoft < 1.0.1 - Reflected Cross-Site Scripting
Medium
0229b20f-65d7-4f55-a773-fd8da479723c
Car Rental by BestWebSoft < 1.0.5 - Reflected Cross-Site Scripting
Medium
64a0bfa9-beb3-4926-bfed-af55a101aff1
Login With Ajax <= 3.1.6 - Cross-Site Scripting
Medium
CVE-2018-17946
Slideshow Gallery <= 1.6.5 - Reflected Cross-Site Scripting
Critical
CVE-2017-7719
SpiderCalendar <= 1.5.51 - SQL Injection
Medium
CVE-2017-8100
CopySafe Web Protection < 2.6 - Cross-Site Request Forgery
High
CVE-2017-8099
WHIZZ < 1.1.1 - Cross-Site Request Forgery
High
CVE-2017-18504
Twitter Cards Meta <= 2.4.5 - Cross-Site Request Forgery
Medium
CVE-2017-18503
Twitter Cards Meta – Best Twitter Card Plugin for WordPress < 2.5.0 - Cross-Site Scripting
High
01139cbd-1116-4cf8-bdcb-cb182588d093
BlogVault WordPress Backup Plugin 1.40 - 1.44 - Unauthenticated PHP Object Injection
Medium
9ae771d1-9c4e-4123-9221-146e7ba2c2ac
WordPress Firewall 2 <= 1.3 - Stored Cross-Site Scripting
Medium
CVE-2018-20977
Schema - All In One Schema Rich Snippets <= 1.4.4 - Cross-Site Scripting
Critical
CVE-2017-1002015
Image Gallery with Slideshow <= 1.5.2 - SQL Injection via selectMulGallery
Critical
CVE-2017-1002013
Image Gallery with Slideshow Plugin <= 1.5.2 - Blind SQL Injection via imgid
Critical
CVE-2017-1002012
Image Gallery with Slideshow Plugin <= 1.5.2 - SQL Injection via gid
Medium
CVE-2017-1002011
Image Gallery with Slideshow Plugin <= 1.5.2 - Stored Cross-Site Scripting
Critical
CVE-2017-1002014
Image Gallery with Slideshow <= 1.5.2 - SQL Injection via gallery_name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.