Medium
CVE-2017-5488
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2017-5490
WordPress Core < 4.7.1 - Stored Cross-Site Scripting via theme directory name
High
CVE-2017-5489
WordPress Core < 4.7.1 - Cross-Site Request Forgery via Uploading Flash File
High
CVE-2017-5492
WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing
Medium
CVE-2017-5487
WordPress Core < 4.7.1 - Information Disclosure
Medium
CVE-2017-5493
WordPress Core < 4.7.1 - Weak Multi-Site Activation Key for User and Site Signup
High
351
RSMonials - XSS (Cross Site Scripting)
High
CVE-2016-6581
HPACK Denial of Service vulnerability (HPACK Bomb)
High
a646a582-7174-4172-a193-c1606c43e6a5
Responsive Poll < 1.7.6 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
cadd47e9-1d5b-4f04-8421-7707dad53ea6
Google Forms <= 0.90 - Unauthenticated PHP Object injection
Medium
e7d4830b-f60a-4556-b40f-1bf9d5a296ad
Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses
Medium
CVE-2017-1000226
Stop User Enumeration plugin <1.3.9 - User Enumeration
Unrated
397
Kunena - XSS (Cross Site Scripting)
Critical
f31bf9cd-fbf3-4f7a-bddd-ddd44c899710
WordPress Ad Widget <= 2.11.0 - Local File Inclusion
Medium
CVE-2017-6514
WordPress Core < 4.7.2 - Path Disclosure
Medium
9d2345d2-0bcf-46fc-a857-0ec10a1b1c26
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure
High
CVE-2016-10927
Nelio AB Testing < 4.5.11 - Server-Side Request Forgery
Unrated
394
AcyMailing
Unrated
347
JMS Support Online module - XSS (Cross Site Scripting)
Critical
CVE-2016-10045
Jomres
Critical
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
High
57837060-433f-471c-9413-6d9b95b69f2a
Image Slider < 1.1.90 - Arbitrary File Deletion
High
CVE-2016-5851
Improper Restriction of XML External Entity Reference in python-docx
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.