Medium
CVE-2017-18488
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,543
Medium
CVE-2015-2687
OpenStack Compute (Nova) Improper Access Control
High
CVE-2015-7764
Lemur uses static IV per key
High
CVE-2017-12651
Loginizer <= 1.3.5 - Cross-Site Request Forgery
Medium
CVE-2017-18593
UpdraftPlus <= 1.13.4 - Stored Cross-Site Scripting
Critical
CVE-2017-12650
Loginizer <= 1.3.5 - Blind SQL Injection
Medium
CVE-2017-13138
Bridge - Creative Multipurpose WordPress Theme < 11.2 - Cross-Site Scripting
Critical
f107a2be-e75b-43f3-8d41-b68c50c27f55
jQuery HTML5 File Upload <= 3.0 - Unauthenticated Arbitrary File Upload
High
CVE-2017-12949
Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection
Medium
CVE-2017-12948
PressForward <= 5.2.3 - Cross-Site Scripting
Medium
7c312478-0d6e-400b-81c2-172c2c5798ff
jQuery HTML5 File Upload <= 3.0 - Unauthenticated Settings Update
High
CVE-2017-12947
Easy Modal < 2.1.0 - SQL Injection
High
CVE-2017-12946
Easy Modal < 2.1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2017-1002027
RK Responsive Contact Form <= 1.0.0 - SQL Injection
Medium
CVE-2018-11568
Gameplan - Event and Gym Fitness WordPress Theme <= 1.6.4 - Reflected Cross-Site Scripting
Unrated
CVE-2016-4313
Extplorer - Directory Traversal
Medium
CVE-2017-18507
WP Live Chat Support <= 7.1.04 - Cross-Site Scripting
Medium
CVE-2017-12200
Ultimate Product Catalog <= 4.2.11 - Cross-Site Scripting
Critical
CVE-2017-12199
Ultimate Product Catalog <= 4.2.22 - SQL Injection
Medium
CVE-2017-12131
Easy Testimonials <= 3.0.4 - Cross-Site Scripting
Medium
CVE-2017-12068
Event List <= 0.7.9 - Unauthenticated Cross-Site Scripting
Medium
CVE-2017-1000227
Salutation < 3.0.16 - Authenticated Stored Cross-Site Scripting
High
50298ef3-352d-4fd2-bbb9-a55cfd329837
Ultimate Affiliate Pro <= 3.9 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2017-18600
Premium WordPress Form Builder <= 3.2.31 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.