Medium
CVE-2017-14724
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2017-14720
WordPress Core < 4.8.2 - Cross-Site Scripting via Template Name
Medium
CVE-2017-14722
WordPress Core < 4.8.2 - Directory Traversal via Customizer
Medium
CVE-2017-14726
WordPress Core < 4.8.2 - Cross-Site Scripting via Shortcodes
Medium
CVE-2017-14719
WordPress Core < 4.8.2 - Directory Traversal during unzip
Low
CVE-2017-14725
WordPress Core < 4.8.2 - Open Redirect in Admin Dashboard
Critical
CVE-2017-14723
WordPress Core < 4.8.2 - SQL Injection via Mishandled Placeholders
Medium
CVE-2017-14721
WordPress Core < 4.8.2 - Stored Cross-Site Scripting via Plugin Names
Critical
f71f2096-e4c9-406a-a4e5-0006b380fbaa
VaultPress <=1.9 - Remote Code Execution
Critical
CVE-2017-18583
Post Pay Counter < 2.731 - PHP Object Injection
High
CVE-2017-18584
Post Pay Counter < 2.731 - Arbitrary Settings Change
Unrated
505
Checklist by Joomplace - SQL Injection
Medium
CVE-2017-1002150
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
Unrated
503
Survey Force Deluxe - SQL Injection
Unrated
504
Joomanager - other
High
CVE-2017-12612
Apache Spark Deserialization of Untrusted Data vulnerability
Medium
CVE-2017-18599
Pinfinity <= 1.9.2 - Reflected Cross-site Scripting
Unrated
502
Payplans
High
ba0fdd81-767a-4858-acdb-e60fd5e15aab
Active Directory Integration <= 1.1.8 - Authenticated (Admin+) SQL Injection
High
CVE-2017-14848
WPHRM - Human Resource Management System < 1.1 - SQL Injection
High
CVE-2017-2551
BackWPup <= 3.4.1 - Unauthenticated Backup Download
Medium
CVE-2017-18577
Mailchimp For WP <= 4.1.7 - Cross-Site Scripting
Medium
2a9bf519-bc55-411b-836a-fb394e317396
Caldera Forms <= 1.5.4 - Cross-Site Scripting
Medium
CVE-2017-12794
Django vulnerable to XSS on 500 pages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.