Critical
CVE-2017-18605
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
4b40e33b-4aa8-4378-b044-a8a636d34f73
Referrer Detector <= 4.2.1.0 - PHP Object Injection
Critical
CVE-2017-18604
SiteBuilder Dynamic Components <= 1.0 - PHP Object Injection
Critical
17ccf3f5-ac71-4827-bf11-9a5199f8752e
AJAX Random Posts <= 0.3.3 - PHP Object Injection
Critical
fc6dcf93-7f1f-4e87-8ba5-852d23b1f0fd
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack
Critical
f4703ca7-0677-4128-b9b7-31132ff1804d
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - CSV Injection
High
CVE-2017-18607
Avada <= 5.1.4 - Cross-Site Request Forgery
Medium
CVE-2017-18606
Avada <= 5.1.4 - Stored Cross-Site Scripting
Critical
CVE-2017-1002016
flickr-picture-backup <= 0.7 - Arbitrary file upload
Medium
35293a82-b535-47a2-8a34-e54fe836ca89
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-10706
Jetpack <= 4.0.2 - Cross-Site Scripting
Critical
CVE-2016-6903
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Critical
CVE-2016-6902
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
High
CVE-2017-18570
cformsII <= 14.12.3 - Authenticated SQL Injection
Critical
CVE-2017-18592
WC Catalog Enquiry <= 3.0.5 - Arbitrary File Upload
Medium
CVE-2017-20008
myCred Plugin <= 1.7.7 - Reflected Cross-Site Scripting
Medium
CVE-2017-18498
Simple Job Board <= 2.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2017-18608
Spot.IM Comments < 4.0.4 - Cross-Site Scripting
Medium
041807ab-9354-4438-8e8a-77140f41eedb
Ultimate Form Builder Lite <= 1.3.2 - Reflected Cross-Site Scripting
Medium
004206fd-c46e-48d7-93f1-884b3261fdb6
AccessPress Social Icons <= 1.6.6 - Cross-Site Scripting
Medium
CVE-2017-18532
Realty by BestWebSoft < 1.1.0 - Reflected Cross-Site Scripting
Medium
f3ebaf25-1bd3-4770-b4bd-30de83b31add
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.31 - Arbitrary Wordpress Shortcode Injection
Medium
CVE-2017-18530
Rating by BestWebSoft < 0.2 - Reflected Cross-Site Scripting
Medium
CVE-2017-18529
PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website <= 1.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.