Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18475 State: PUBLISHED Published: 2019-08-05T12:45:24 Last Updated: 2024-08-05T21:20:51.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18476 State: PUBLISHED Published: 2019-08-05T12:46:19 Last Updated: 2024-08-05T21:20:51.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18477 State: PUBLISHED Published: 2019-08-05T12:47:04 Last Updated: 2024-08-05T21:20:51.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18478 State: PUBLISHED Published: 2019-08-05T12:47:50 Last Updated: 2024-08-05T21:20:51.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18479 State: PUBLISHED Published: 2019-08-05T12:48:34 Last Updated: 2024-08-05T21:20:51.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18480 State: PUBLISHED Published: 2019-08-05T12:49:19 Last Updated: 2024-08-05T21:20:51.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18481 State: PUBLISHED Published: 2019-08-05T12:50:01 Last Updated: 2024-08-05T21:20:51.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18482 State: PUBLISHED Published: 2019-08-05T12:50:50 Last Updated: 2024-08-05T21:20:51.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non-rearrange modules (SEC-213). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18483 State: PUBLISHED Published: 2019-08-07T12:38:40 Last Updated: 2024-08-05T21:20:51.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera/
CVE ID: CVE-2017-18484 State: PUBLISHED Published: 2019-08-08T20:05:28 Last Updated: 2024-08-05T21:20:51.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cognitoys Dino devices allow XSS via the SSID. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/
CVE ID: CVE-2017-18485 State: PUBLISHED Published: 2019-08-08T20:04:34 Last Updated: 2024-08-05T21:20:51.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cognitoys Dino devices allow profiles_add.html CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/
CVE ID: CVE-2017-18486 State: PUBLISHED Published: 2019-08-09T16:45:53 Last Updated: 2024-08-05T21:20:51.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user. Additional Analyst Notes: - CVE Program Container: Referen
ens can be used to automatically log in as the affected user. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustedsec.com/2017/09/full-disclosure-jitbit-helpdesk-authentication-bypass-0-day - https://github.com/Kc57/JitBit_Helpdesk_Auth_Bypass - https://www.exploit-db.com/exploits/42776 - https://packetstormsecurity.com/files/144334/JitBit-Helpdesk-9.0.2-Broken-Authentication.html
CVE ID: CVE-2017-18487 State: PUBLISHED Published: 2019-08-13T17:54:06 Last Updated: 2024-08-05T21:20:51.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/adsense-plugin/#developers
CVE ID: CVE-2017-18488 State: PUBLISHED Published: 2019-08-13T17:53:14 Last Updated: 2024-08-05T21:20:51.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/backup/#developers
CVE ID: CVE-2017-18489 State: PUBLISHED Published: 2019-08-13T16:50:29 Last Updated: 2024-08-05T21:20:51.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-7-sms-addon/#developers
CVE ID: CVE-2017-18490 State: PUBLISHED Published: 2019-08-13T16:50:06 Last Updated: 2024-08-05T21:20:51.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-multi/#developers
CVE ID: CVE-2017-18491 State: PUBLISHED Published: 2019-08-13T16:49:40 Last Updated: 2024-08-05T21:20:51.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-plugin/#developers
CVE ID: CVE-2017-18492 State: PUBLISHED Published: 2019-08-13T16:47:27 Last Updated: 2024-08-05T21:20:51.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-to-db/#developers
CVE ID: CVE-2017-18493 State: PUBLISHED Published: 2019-08-13T16:45:15 Last Updated: 2024-08-05T21:20:51.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-admin-page/#developers
CVE ID: CVE-2017-18494 State: PUBLISHED Published: 2019-08-13T16:44:42 Last Updated: 2024-08-05T21:20:51.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-search-plugin/#developers
CVE ID: CVE-2017-18495 State: PUBLISHED Published: 2019-08-13T16:40:16 Last Updated: 2024-08-05T21:28:54.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gravity-forms-sms-notifications/#developers
CVE ID: CVE-2017-18496 State: PUBLISHED Published: 2019-08-13T16:39:23 Last Updated: 2024-08-05T21:28:54.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/htaccess/#developers
CVE ID: CVE-2017-18497 State: PUBLISHED Published: 2019-08-13T16:37:53 Last Updated: 2024-08-05T21:28:54.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liveforms plugin before 3.4.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/liveforms/#developers
CVE ID: CVE-2017-18498 State: PUBLISHED Published: 2019-08-13T16:34:51 Last Updated: 2024-08-05T21:28:54.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-job-board/#developers
CVE ID: CVE-2017-18499 State: PUBLISHED Published: 2019-08-12T15:41:28 Last Updated: 2024-08-05T21:28:54.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-membership plugin before 3.5.7 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-membership/#developers - https://wpvulndb.com/vulnerabilities/9718
CVE ID: CVE-2017-18500 State: PUBLISHED Published: 2019-08-12T15:39:56 Last Updated: 2024-08-05T21:28:54.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/social-buttons-pack/#developers
CVE ID: CVE-2017-18501 State: PUBLISHED Published: 2019-08-12T15:39:09 Last Updated: 2024-08-05T21:28:54.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/social-login-bws/#developers
CVE ID: CVE-2017-18502 State: PUBLISHED Published: 2019-08-12T15:38:44 Last Updated: 2024-08-05T21:28:54.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/subscriber/#developers
CVE ID: CVE-2017-18503 State: PUBLISHED Published: 2019-08-12T15:36:40 Last Updated: 2024-08-05T21:28:54.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/twitter-cards-meta/#developers
CVE ID: CVE-2017-18504 State: PUBLISHED Published: 2019-08-12T15:36:15 Last Updated: 2024-08-05T21:28:54.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/twitter-cards-meta/#developers
CVE ID: CVE-2017-18505 State: PUBLISHED Published: 2019-08-12T15:35:12 Last Updated: 2024-08-05T21:28:54.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The twitter-plugin plugin before 2.55 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/twitter-plugin/#developers
CVE ID: CVE-2017-18506 State: PUBLISHED Published: 2019-08-12T14:58:56 Last Updated: 2024-08-05T21:28:55.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woocommerce-pdf-invoices-packing-slips/#developers
CVE ID: CVE-2017-18507 State: PUBLISHED Published: 2019-08-13T16:34:12 Last Updated: 2024-08-05T21:28:54.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-live-chat-support/#developers
CVE ID: CVE-2017-18508 State: PUBLISHED Published: 2019-08-12T14:49:09 Last Updated: 2024-08-05T21:28:54.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-live-chat-support/#developers - https://wpvulndb.com/vulnerabilities/9719
CVE ID: CVE-2017-18509 State: PUBLISHED Published: 2019-08-13T13:17:36 Last Updated: 2024-08-05T21:28:54.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_*
amespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187. Additional Analyst Notes: - CVE Program Container: References: - https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-inetcsklistenstop-gpf - https://salsa.debian.org/kernel-team/linux/commit/baefcdc2f29923e7325ce4e1a72c3ff0a9800f32 - https://lists.openwall.net/netdev/2017/12/04/40 - https://github.com/torvalds/linux/commit/99253eb750fda6a644d5188fb26c43bad8d5a745 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99253eb750fda6a644d5188fb26c43bad8
d8d5a745 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99253eb750fda6a644d5188fb26c43bad8d5a745 - https://www.debian.org/security/2019/dsa-4497 - https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html - https://seclists.org/bugtraq/2019/Aug/26 - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://support.f5.com/csp/article/K41582535 - https://usn.ubuntu.com/4145-1/ - https://support.f5.com/csp/article/K41582535?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2017-18510 State: PUBLISHED Published: 2019-08-14T15:42:46 Last Updated: 2024-08-05T21:28:54.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-sidebars/#developers
CVE ID: CVE-2017-18511 State: PUBLISHED Published: 2019-08-14T15:38:24 Last Updated: 2024-08-05T21:28:54.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-sidebars/#developers
CVE ID: CVE-2017-18512 State: PUBLISHED Published: 2019-08-14T15:32:06 Last Updated: 2024-08-05T21:28:54.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newsletter-by-supsystic/#developers
CVE ID: CVE-2017-18513 State: PUBLISHED Published: 2019-08-14T15:31:25 Last Updated: 2024-08-05T21:28:54.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/responsive-menu/#developers
CVE ID: CVE-2017-18514 State: PUBLISHED Published: 2019-08-14T14:48:53 Last Updated: 2024-08-05T21:28:54.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-login-log/#developers
CVE ID: CVE-2017-18515 State: PUBLISHED Published: 2019-08-14T13:27:13 Last Updated: 2024-08-05T21:28:54.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-statistics plugin before 12.0.8 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-statistics/#developers
CVE ID: CVE-2017-18516 State: PUBLISHED Published: 2019-08-21T18:19:39 Last Updated: 2024-08-05T21:28:54.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bws-linkedin/#developers
CVE ID: CVE-2017-18517 State: PUBLISHED Published: 2019-08-20T14:45:31 Last Updated: 2024-08-05T21:28:54.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bws-pinterest/#developers
CVE ID: CVE-2017-18518 State: PUBLISHED Published: 2019-08-20T15:01:22 Last Updated: 2024-08-05T21:28:54.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bws-smtp/#developers
CVE ID: CVE-2017-18519 State: PUBLISHED Published: 2019-08-20T15:15:09 Last Updated: 2024-08-05T21:28:55.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/customer-area/#developers
CVE ID: CVE-2017-18520 State: PUBLISHED Published: 2019-08-20T14:52:29 Last Updated: 2024-08-05T21:28:55.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/democracy-poll/#developers - https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/
CVE ID: CVE-2017-18521 State: PUBLISHED Published: 2019-08-21T18:18:48 Last Updated: 2024-08-05T21:28:55.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/democracy-poll/#developers - https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/
CVE ID: CVE-2017-18522 State: PUBLISHED Published: 2019-08-20T15:04:35 Last Updated: 2024-08-05T21:28:54.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/eelv-newsletter/#developers
CVE ID: CVE-2017-18523 State: PUBLISHED Published: 2019-08-20T15:08:56 Last Updated: 2024-08-05T21:28:54.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/eelv-newsletter/#developers
CVE ID: CVE-2017-18524 State: PUBLISHED Published: 2019-08-20T15:17:33 Last Updated: 2024-08-05T21:28:55.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/football-pool/#developers
CVE ID: CVE-2017-18525 State: PUBLISHED Published: 2019-08-21T18:16:09 Last Updated: 2024-08-05T21:28:54.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The megamenu plugin before 2.4 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/megamenu/#developers
CVE ID: CVE-2017-18526 State: PUBLISHED Published: 2019-08-20T15:26:32 Last Updated: 2024-08-05T21:28:54.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The moreads-se plugin before 1.4.7 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/moreads-se/#developers
CVE ID: CVE-2017-18527 State: PUBLISHED Published: 2019-08-20T15:30:14 Last Updated: 2024-08-05T21:28:55.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pagination plugin before 1.0.7 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pagination/#developers
CVE ID: CVE-2017-18528 State: PUBLISHED Published: 2019-08-20T15:44:19 Last Updated: 2024-08-05T21:28:55.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pdf-print/#developers
CVE ID: CVE-2017-18529 State: PUBLISHED Published: 2019-08-20T15:45:41 Last Updated: 2024-08-05T21:28:55.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The promobar plugin before 1.1.1 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/promobar/#developers
CVE ID: CVE-2017-18530 State: PUBLISHED Published: 2019-08-20T15:47:11 Last Updated: 2024-08-05T21:28:54.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rating-bws plugin before 0.2 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/rating-bws/#developers
CVE ID: CVE-2017-18531 State: PUBLISHED Published: 2019-08-20T15:48:44 Last Updated: 2024-08-05T21:28:54.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/raygun4wp/#developers