Search
Search Results (20777 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-21006 | 1 Bbpress Move Topics Project | 1 Bbpress Move Topics | 2024-11-21 | N/A |
| The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF. | ||||
| CVE-2018-21005 | 1 Bbpress Move Topics Project | 1 Bbpress Move Topics | 2024-11-21 | N/A |
| The bbp-move-topics plugin before 1.1.6 for WordPress has code injection. | ||||
| CVE-2018-21004 | 1 Carrcommunications | 1 Rsvpmaker | 2024-11-21 | N/A |
| The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. | ||||
| CVE-2018-21003 | 1 Themekraft | 1 Buddyforms | 2024-11-21 | N/A |
| The buddyforms plugin before 2.2.8 for WordPress has SQL injection. | ||||
| CVE-2018-21002 | 1 Joomsky | 1 Js Help Desk | 2024-11-21 | N/A |
| The js-support-ticket plugin before 2.0.6 for WordPress has CSRF. | ||||
| CVE-2018-21001 | 1 Bologer | 1 Anycomment | 2024-11-21 | N/A |
| The anycomment plugin before 0.0.33 for WordPress has XSS. | ||||
| CVE-2018-20988 | 1 Google Forms Project | 1 Google Forms | 2024-11-21 | N/A |
| The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation. | ||||
| CVE-2018-20987 | 1 Tribulant | 1 Newsletters | 2024-11-21 | N/A |
| The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. | ||||
| CVE-2018-20986 | 1 Advancedcustomfields | 1 Advanced Custom Fields | 2024-11-21 | N/A |
| The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors. | ||||
| CVE-2018-20985 | 1 Payeezy | 1 Wp Payeezy Pay | 2024-11-21 | N/A |
| The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec. | ||||
| CVE-2018-20984 | 1 Patreon | 1 Patreon Wordpress | 2024-11-21 | N/A |
| The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. | ||||
| CVE-2018-20983 | 1 Meowapps | 1 Wp Retina 2x | 2024-11-21 | N/A |
| The wp-retina-2x plugin before 5.2.3 for WordPress has XSS. | ||||
| CVE-2018-20982 | 1 Davidlingren | 1 Media Library Assistant | 2024-11-21 | N/A |
| The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens. | ||||
| CVE-2018-20981 | 1 Ninjaforms | 1 Ninja Forms | 2024-11-21 | N/A |
| The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests. | ||||
| CVE-2018-20980 | 1 Ninjaforms | 1 Ninja Forms | 2024-11-21 | N/A |
| The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering. | ||||
| CVE-2018-20979 | 1 Rocklobster | 1 Contact Form 7 | 2024-11-21 | N/A |
| The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type. | ||||
| CVE-2018-20978 | 1 Soflyy | 1 Wp All Import | 2024-11-21 | N/A |
| The wp-all-import plugin before 3.4.7 for WordPress has XSS. | ||||
| CVE-2018-20974 | 1 Joomsky | 1 Js Job Manager | 2024-11-21 | N/A |
| The js-jobs plugin before 1.0.7 for WordPress has CSRF. | ||||
| CVE-2018-20973 | 1 Codeermeneer | 1 Companion Auto Update | 2024-11-21 | N/A |
| The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion. | ||||
| CVE-2018-20972 | 1 Codeermeneer | 1 Companion Auto Update | 2024-11-21 | N/A |
| The companion-auto-update plugin before 3.2.1 for WordPress has CSRF. | ||||