Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,880

CVE-2017-20086

VaultPress Plugin code injection

A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.

CVSS 3.1 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Automattic
Products
Vaultpress
CVE-2017-20087

Alpine PhotoTile for Instagram Plugin cross site scriting

A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Thealpinepress
Products
Alpine-photo-tile-for-instagram
CVE-2017-20088

Atahualpa Theme cross-site request forgery

A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Bytesforall
Products
Atahualpa
CVE-2017-20089

Gwolle Guestbook Plugin cross site scriting

A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Gwolle Guestbook Project
Products
Gwolle Guestbook
CVE-2017-20090

Global Content Blocks Plugin cross-site request forgery

A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Global Content Blocks Project
Products
Global Content Blocks
CVE-2017-20091

File Manager Plugin cross-site request forgery

A vulnerability was found in File Manager Plugin 3.0.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wpjos
Products
Library File Manager
CVE-2017-20092

Google Analytics Dashboard Plugin cross site scriting

A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Yoast
Products
Google Analytics Dashboard
CVE-2017-20093

Download Manager Plugin cross-site request forgery

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
W3eden
Products
Download Manager
CVE-2017-20094

NewStatPress Plugin Persistent cross site scriting

A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this issue. It is recommended to upgrade the affected component.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Newstatpress Project
Products
Newstatpress
CVE-2017-20097

WP-Filebase Download Manager Plugin cross site scriting

A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Wp-filebase Download Manager Project
Products
Wp-filebase Download Manager
CVE-2022-2212

SourceCodester Library Management System /card/index.php unrestricted upload

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 6.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Library Management System Project
Products
Library Management System
CVE-2022-2213

SourceCodester Library Management System cross site scripting

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_admin_details.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Library Management System Project
Products
Library Management System
CVE-2022-2214

SourceCodester Library Management System bookdetails.php sql injection

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Library Management System Project
Products
Library Management System
CVE-2017-20100

Air Transfer cross site scripting

A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Air Transfer Project
Products
Air Transfer
CVE-2017-20101

ProjectSend information disclosure

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.

CVSS 3.1 · 3.5 Low EPSS 1.1% KEV · Not listed
Vendors
Projectsend
Products
Projectsend
CVE-2017-20102

Album Lock getImage path traversal

A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Album Lock Project
Products
Album Lock
CVE-2017-20098

Admin Custom Login Plugin Persistent cross site scripting

A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Weblizar
Products
Admin Custom Login
CVE-2017-20103

Kama Click Counter Plugin admin.php Blind sql injection

A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument order_by/order with the input ASC%2c(select*from(select(sleep(2)))a) leads to sql injection (Blind). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.9 is able to address this issue. It is recommended to upgrade the affected component.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-kama
Products
Kama Click Counter
CVE-2017-20104

Simplessus Cookie Time sql injection

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWA_SID leads to sql injection (Time). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component.

CVSS 3.1 · 7.3 High EPSS 1.1% KEV · Not listed
Vendors
Simplessus
Products
Simplessus