Skip to content
OpenAdvisories

Archive

12 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /12 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.8
    CVE-2018-5364

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/options.php.

    wpglobus/wpglobus Packagist
  • Medium 4.8
    CVE-2018-5363

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or any other language) parameter to wp-admin/options.php.

    wpglobus/wpglobus Packagist
  • Medium 4.8
    CVE-2018-5365

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options.php.

    wpglobus/wpglobus Packagist
  • Medium 4.8
    CVE-2018-5362

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][page] parameter to wp-admin/options.php.

    wpglobus/wpglobus Packagist
  • Medium 4.8
    CVE-2018-5367

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][post] parameter to wp-admin/options.php.

    wpglobus/wpglobus Packagist
  • Medium 4.8
    CVE-2018-5366

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages] parameter to wp-admin/options.php.

    wpglobus/wpglobus Packagist