High
CVE-2017-6576
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
f321b8f6-0712-4932-b861-b208debb368f
VaultPress <= 1.8.6 - Remote Code Execution
Medium
7c4797a6-43c1-4183-95ec-4e150a1d774a
Google Analytics Dashboard <= 2.1.1 - Reflected Cross-Site Scripting
Critical
7af05793-b495-4cad-842b-f168d0dc8253
Analytics Stats Counter Statistics <= 1.2.2.5 - Unauthenticated PHP Object Injection
High
CVE-2017-6577
Mail Masta <= 1.0 - SQL Injection via list_id parameter
High
CVE-2017-6572
Mail Masta <= 1.0 - SQL Injection via filter_list parameter
High
CVE-2017-6575
Mail Masta <= 1.0 - SQL Injection via member_id parameter
Critical
CVE-2017-6095
Mail Masta <= 1.0 - SQL Injection via list_id parameter
High
CVE-2017-6573
Mail Masta <= 1.0 - SQL Injection via id parameter
High
CVE-2017-6571
Mail Masta <= 1.0 - SQL Injection via id parameter
High
CVE-2017-6097
Mail Masta <= 1.0 - SQL Injection via camp_id parameter
High
CVE-2017-6096
Mail Masta <= 1.0 - SQL Injection via filter_list parameter
High
CVE-2017-6570
Mail Masta <= 1.0 - SQL Injection via id parameter
High
CVE-2017-6098
Mail Masta <= 1.0 - SQL Injection via list_id parameter
High
78fedd41-f0ab-4148-a798-88de62f27008
NextGen Gallery <= 2.1.77 - SQL Injection
High
c006b85d-fc05-41e7-93b2-5a09a21bec1a
Row Seats Core < 2.68 - PHP Object Injection
High
CVE-2017-18585
Posts in Page <= 1.2.4 - Authenticated Directory Traversal leading to Local File Inclusion
High
db9cd10e-90c1-48b2-8760-d5fc501fb3ba
Javo Spot < 3.0.0 - Directory Traversal
Medium
b980b8e2-73e6-4afc-a24c-c7c98283e85b
Translate WordPress with GTranslate <= 2.8.10 - Open Redirect
Critical
CVE-2016-15004
InfiniteWP Client <= 1.6.0 - Unauthenticated PHP Object Injection
High
390ee957-f06f-4952-b740-4578c130925f
WP Email Users <= 1.4.4 - SQL Injection
Critical
5804da94-1dee-47f8-930b-c5413d5506b9
Direct Download for Woocommerce < 1.16 - Local File Inclusion
Medium
CVE-2017-18612
WP Whois Domain <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-10892
Chained Quiz Plugin < 1.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.