Skip to content
OpenAdvisories

Archive

22 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /22 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

111 results · Feed

  • Unscored —
    CVE-2016-10922

    The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.

  • Unscored —
    CVE-2017-18575

    The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.

  • Unscored —
    CVE-2018-20982

    The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library …

  • Unscored —
    CVE-2013-7481

    The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

  • Unscored —
    CVE-2019-15318

    The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.

  • Unscored —
    CVE-2017-18574

    The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.

  • Unscored —
    CVE-2018-20981

    The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Exp…

  • Unscored —
    CVE-2009-5158

    The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API t…

  • Unscored —
    CVE-2018-20980

    The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering.

  • Unscored —
    CVE-2018-20979

    The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in…

  • Unscored —
    CVE-2017-18573

    The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.

  • Unscored —
    CVE-2016-10921

    The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.

  • Unscored —
    CVE-2016-10920

    The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.

  • Unscored —
    CVE-2017-18572

    The gnucommerce plugin before 1.4.2 for WordPress has XSS.

  • Unscored —
    CVE-2012-6716

    The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

  • Unscored —
    CVE-2013-7480

    The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

  • Unscored —
    CVE-2013-7479

    The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

  • Unscored —
    CVE-2013-7478

    The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

  • Unscored —
    CVE-2019-14511

    Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the inte…

    sphinxsearch sphinxsearch Debian Ubuntu
  • Unscored —
    CVE-2013-7477

    The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

  • Unscored —
    CVE-2016-10919

    The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a d…

  • Unscored —
    CVE-2016-10918

    The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.

  • Unscored —
    CVE-2019-15317

    The give plugin before 2.4.7 for WordPress has XSS via a donor name.

  • Unscored —
    CVE-2015-9336

    The clean-login plugin before 1.5.1 for WordPress has reflected XSS.

  • Unscored —
    CVE-2017-18571

    The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulne…

  • Unscored —
    CVE-2016-10917

    The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different …

  • Unscored —
    CVE-2015-9335

    The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.

  • Unscored —
    CVE-2019-15314

    tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting…

  • Unscored —
    CVE-2015-9333

    The cforms2 plugin before 14.6.10 for WordPress has SQL injection.

  • Unscored —
    CVE-2017-18570

    The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download E…

  • Unscored —
    CVE-2016-10916

    The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than C…