Skip to content
OpenAdvisories

Archive

28 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /28 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

70 results · Feed

  • Unscored —
    CVE-2015-9375

    Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query…

  • Unscored —
    CVE-2015-9374

    Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9373

    PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9372

    Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9371

    Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_ar…

  • Unscored —
    CVE-2015-9370

    Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9369

    Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query…

  • Unscored —
    CVE-2015-9368

    Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and …

  • Unscored —
    CVE-2015-9367

    Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove…

  • Unscored —
    CVE-2015-9366

    Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query…

  • Unscored —
    CVE-2015-9365

    Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9364

    2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9363

    iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9362

    The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9361

    The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9360

    The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2019-15713 Scanner template

    The my-calendar plugin before 3.1.10 for WordPress has XSS.

  • Unscored —
    CVE-2019-15714

    cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory t…

  • Unscored —
    CVE-2015-9358

    The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • Unscored —
    CVE-2015-9357 Public exploit

    The akismet plugin before 3.1.5 for WordPress has XSS.

  • Unscored —
    CVE-2015-9356

    The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue…

  • Unscored —
    CVE-2017-18593

    The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to …

  • Unscored —
    CVE-2015-9355

    The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.

  • Unscored —
    CVE-2012-6719

    The sharebar plugin before 1.2.2 for WordPress has SQL injection.

  • Unscored —
    CVE-2012-6718

    The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.

  • Unscored —
    CVE-2011-5329

    The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562.

  • Unscored —
    CVE-2012-6717

    The redirection plugin before 2.2.12 for WordPress has XSS, a different issue than CVE-2011-4562.

  • Unscored —
    CVE-2015-9354

    The gigpress plugin before 2.3.11 for WordPress has XSS.

  • Unscored —
    CVE-2015-9353

    The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE…

  • Unscored —
    CVE-2019-15294

    An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service ac…