rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-18427 
In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:46:20.000Z
CVE-2017-18428 
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:47:25.000Z
CVE-2017-18429 
In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:54:08.000Z
CVE-2017-18430 
In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:55:00.000Z
CVE-2017-18431 
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:56:07.000Z
CVE-2017-18432 
In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:57:43.000Z
CVE-2017-18433 
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:58:29.000Z
CVE-2017-18434 
cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T15:59:21.000Z
CVE-2017-18435 
cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:00:05.000Z
CVE-2017-18436 
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:13:12.000Z
CVE-2017-18437 
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:13:57.000Z
CVE-2017-18438 
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:14:48.000Z
CVE-2017-18439 
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:15:43.000Z
CVE-2017-18440 
cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:16:29.000Z
CVE-2017-18441 
cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:17:15.000Z
CVE-2017-18442 
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:18:01.000Z
CVE-2017-18443 
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:18:42.000Z
CVE-2017-18444 
cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:19:27.000Z
CVE-2017-18445 
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:20:09.000Z
CVE-2017-18446 
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:20:55.000Z
CVE-2017-18447 
cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:22:14.000Z
CVE-2017-18448 
cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:22:57.000Z
CVE-2017-18449 
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:23:51.000Z
CVE-2017-18450 
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:24:35.000Z
CVE-2017-18451 
cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:25:22.000Z
CVE-2017-18452 
cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:26:04.000Z
CVE-2017-18453 
cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:26:50.000Z
CVE-2017-18454 
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:28:02.000Z
CVE-2017-18455 
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:28:51.000Z
CVE-2017-18456 
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:29:33.000Z
CVE-2017-18457 
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:30:22.000Z
CVE-2017-18458 
cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:31:05.000Z
CVE-2017-18459 
cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:31:44.000Z
CVE-2017-18460 
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:32:32.000Z
CVE-2017-18461 
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:33:17.000Z
CVE-2017-18462 
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T11:49:11.000Z
CVE-2017-18463 
cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-02T16:33:59.000Z
CVE-2017-18464 
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T11:49:56.000Z
CVE-2017-18465 
cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T11:51:32.000Z
CVE-2017-18466 
cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T11:50:47.000Z
CVE-2017-18467 
cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T11:52:18.000Z
CVE-2017-18468 
cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T11:53:13.000Z
CVE-2017-18469 
cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:40:03.000Z
CVE-2017-18470 
cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:41:28.000Z
CVE-2017-18471 
cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:42:13.000Z
CVE-2017-18472 
cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:43:00.000Z
CVE-2017-18473 
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:43:53.000Z
CVE-2017-18474 
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:44:37.000Z
CVE-2017-18475 
In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:45:24.000Z
CVE-2017-18476 
Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:46:19.000Z
CVE-2017-18477 
In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:47:04.000Z
CVE-2017-18478 
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:47:50.000Z
CVE-2017-18479 
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:48:34.000Z
CVE-2017-18480 
cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:49:19.000Z
CVE-2017-18481 
cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:50:01.000Z
CVE-2017-18482 
cPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non-rearrange modules (SEC-213).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-05T12:50:50.000Z
CVE-2017-18483 
ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-07T12:38:40.000Z
CVE-2017-18484 
Cognitoys Dino devices allow XSS via the SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:05:28.000Z
CVE-2017-18485 
Cognitoys Dino devices allow profiles_add.html CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:04:34.000Z
CVE-2017-18486 
Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T16:45:53.000Z
CVE-2017-18487 
The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T17:54:06.000Z
CVE-2017-18488 
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T17:53:14.000Z
CVE-2017-18489 
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:50:29.000Z
CVE-2017-18490 
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:50:06.000Z
CVE-2017-18491 
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:49:40.000Z
CVE-2017-18492 
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:47:27.000Z
CVE-2017-18493 
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:45:15.000Z
CVE-2017-18494 
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:44:42.000Z
CVE-2017-18495 
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:40:16.000Z
CVE-2017-18496 
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:39:23.000Z
CVE-2017-18497 
The liveforms plugin before 3.4.0 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:37:53.000Z
CVE-2017-18498 
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:34:51.000Z
CVE-2017-18499 
The simple-membership plugin before 3.5.7 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:41:28.000Z
CVE-2017-18500 
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:39:56.000Z
CVE-2017-18501 
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:39:09.000Z
CVE-2017-18502 
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:38:44.000Z
CVE-2017-18503 
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:36:40.000Z
CVE-2017-18504 
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:36:15.000Z
CVE-2017-18505 
The twitter-plugin plugin before 2.55 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T15:35:12.000Z
CVE-2017-18506 
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:58:56.000Z
CVE-2017-18507 
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:34:12.000Z
CVE-2017-18508 
The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-12T14:49:09.000Z
CVE-2017-18509 
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T13:17:36.000Z
CVE-2017-18510 
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:42:46.000Z
CVE-2017-18511 
The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:38:24.000Z
CVE-2017-18512 
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:32:06.000Z
CVE-2017-18513 
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:31:25.000Z
CVE-2017-18514 
The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T14:48:53.000Z
CVE-2017-18515 
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T13:27:13.000Z
CVE-2017-18516 
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:19:39.000Z
CVE-2017-18517 
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:45:31.000Z
CVE-2017-18518 
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:01:22.000Z
CVE-2017-18519 
The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:15:09.000Z
CVE-2017-18520 
The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:52:29.000Z
CVE-2017-18521 
The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:18:48.000Z
CVE-2017-18522 
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:04:35.000Z
CVE-2017-18523 
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:08:56.000Z
CVE-2017-18524 
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:17:33.000Z
CVE-2017-18525 
The megamenu plugin before 2.4 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T18:16:09.000Z
CVE-2017-18526 
The moreads-se plugin before 1.4.7 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:26:32.000Z
CVE-2017-18527 
The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:30:14.000Z
CVE-2017-18528 
The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:44:19.000Z
CVE-2017-18529 
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:45:41.000Z
CVE-2017-18530 
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:47:11.000Z
CVE-2017-18531 
The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:48:44.000Z
CVE-2017-18532 
The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:50:24.000Z
CVE-2017-18533 
The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:52:00.000Z