) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Results Type: Overview
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2019-15111 |
The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue. Published: August 21, 2019; 9:15:12 AM -0400 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2019-15110 |
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS. Published: August 21, 2019; 9:15:12 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18565 |
The updater plugin before 1.35 for WordPress has multiple XSS issues. Published: August 21, 2019; 9:15:12 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18560 |
The content-audit plugin before 1.9.2 for WordPress has XSS. Published: August 21, 2019; 9:15:12 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18558 |
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18557 |
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18556 |
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18555 |
The booking-sms plugin before 1.1.0 for WordPress has XSS. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18554 |
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18553 |
The ad-buttons plugin before 2.3.2 for WordPress has XSS. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2016-10909 |
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH |
| CVE-2016-10908 |
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2016-10903 |
The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 8.8 HIGH V2.0: 6.8 MEDIUM |
| CVE-2016-10902 |
The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 8.8 HIGH V2.0: 6.8 MEDIUM |
| CVE-2016-10901 |
The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2016-10900 |
The uji-countdown plugin before 2.0.7 for WordPress has XSS. Published: August 21, 2019; 9:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2019-15109 |
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter. Published: August 21, 2019; 8:15:11 AM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18540 |
The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes. Published: August 21, 2019; 8:15:11 AM -0400 |
V4.0:(not available) V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18539 |
The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes. Published: August 21, 2019; 8:15:11 AM -0400 |
V4.0:(not available) V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2017-18538 |
The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes. Published: August 21, 2019; 8:15:11 AM -0400 |
V4.0:(not available) V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |