Database

WordPress Vulnerability Database (page 1374)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1374)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Multiple Cross-Site Scripting SMTP by BestWebSoft≤1.0.9Update to 1.1.0	CVE-2017-18518	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting BestWebSoft’s Pinterest≤1.0.4Update to 1.0.5	CVE-2017-18517	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Post to CSV by BestWebSoft<1.3.1Update to 1.3.1	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Latest Posts by BestWebSoft<0.3Update to 0.3	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Job Board by BestWebSoft<1.1.4Update to 1.1.4	—	—	Apr 12, 2017
Medium6.1	Multiple Cross-Site Scripting AdPush≤1.43Update to 1.44	CVE-2017-18487	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms<1.1.8Update to 1.1.8	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Google +1 by BestWebSoft<1.3.4Update to 1.3.4	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Profile Extra Fields by BestWebSoft<1.0.6Update to 1.0.6	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Maps by BestWebSoft≤1.3.5Update to 1.3.6	CVE-2017-18557	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Re-attacher by BestWebSoft<1.0.9Update to 1.0.9	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress<2.4.0Update to 2.4.0	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Popular Posts by BestWebSoft<1.0.5Update to 1.0.5	—	—	Apr 12, 2017
Medium6.1	Multiple Cross-Site Scripting Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress≤1.5.6Update to 1.5.7	CVE-2017-18492	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher<1.2.3Update to 1.2.3	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Custom Fields Search by BestWebSoft<1.3.2Update to 1.3.2	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin≤0.1.1Update to 0.1.2	CVE-2017-18493	—	Apr 12, 2017
Medium6.1	Multiple Cross-Site Scripting Subscriber by BestWebSoft≤1.3.4Update to 1.3.5	CVE-2017-18502	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website<1.2.1Update to 1.2.1	CVE-2017-18490	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Quotes and Tips by BestWebSoft<1.3.2Update to 1.3.2	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Gallery Categories by BestWebSoft<1.0.9Update to 1.0.9	—	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Updater by BestWebSoft≤1.34Update to 1.35	CVE-2017-18565	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Visitors Online by BestWebSoft<1.0.0Update to 1.0.0	CVE-2017-18537	—	Apr 12, 2017
Medium6.1	ReflectedCross-Site Scripting Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress<3.96Update to 3.96	CVE-2015-9295	—	Apr 12, 2017
Medium6.1	Reflected Cross-Site Scripting Custom Search by BestWebSoft – WordPress Custom Search Plugin≤1.35Update to 1.36	CVE-2017-18494	—	Apr 12, 2017
Medium5.4	Cross-Site Scripting AJAX Auth – Fast Logins, 2FA, Redirects≤3.1.6Update to 3.1.7	—	—	Apr 11, 2017
Medium6.1	Reflected Cross-Site Scripting Slideshow Gallery LITE≤1.6.5Update to 1.6.6	CVE-2018-17946	—	Apr 10, 2017
Critical9.8	SQL Injection SpiderCalendar≤1.5.51Update to 1.5.52	CVE-2017-7719	—	Apr 10, 2017
High8.8	Cross-Site Request Forgery WHIZZ≤1.1Update to 1.1.1	CVE-2017-8099	—	Apr 7, 2017
Medium6.5	Cross-Site Request Forgery CopySafe Web Protection – Copy Protect Images<2.6Update to 2.6	CVE-2017-8100	—	Apr 7, 2017

Medium6.1
Multiple Cross-Site Scripting
SMTP by BestWebSoft
≤1.0.9Update to 1.1.0
CVE-2017-18518Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
BestWebSoft’s Pinterest
≤1.0.4Update to 1.0.5
CVE-2017-18517Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Post to CSV by BestWebSoft
<1.3.1Update to 1.3.1
b2af416b-4510-468f-81ef-aa09f2fd51acApr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Latest Posts by BestWebSoft
<0.3Update to 0.3
b8580107-bbc1-4d6e-bb72-f1efc404d7b3Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Job Board by BestWebSoft
<1.1.4Update to 1.1.4
38ff10d3-d9ce-440b-b956-002803d49f54Apr 12, 2017
Medium6.1
Multiple Cross-Site Scripting
AdPush
≤1.43Update to 1.44
CVE-2017-18487Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms
<1.1.8Update to 1.1.8
3eb4b3e7-6aad-4201-b48b-c8d788eb8acfApr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Google +1 by BestWebSoft
<1.3.4Update to 1.3.4
44af8ced-5ea4-4bdb-a664-c5b58d683d23Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Profile Extra Fields by BestWebSoft
<1.0.6Update to 1.0.6
43b0cb21-ba81-4d54-90d1-a2f25297e719Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Maps by BestWebSoft
≤1.3.5Update to 1.3.6
CVE-2017-18557Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Re-attacher by BestWebSoft
<1.0.9Update to 1.0.9
4541ab5d-5c99-46e8-bc78-fa2c5cffd09bApr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress
<2.4.0Update to 2.4.0
4148b37e-c5dd-43a1-aecf-085ce4fb2473Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Popular Posts by BestWebSoft
<1.0.5Update to 1.0.5
730dac2b-edc2-4bfc-a1c5-ffeba71308adApr 12, 2017
Medium6.1
Multiple Cross-Site Scripting
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress
≤1.5.6Update to 1.5.7
CVE-2017-18492Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Multilanguage by BestWebSoft – WordPress Translation Plugin and Language Switcher
<1.2.3Update to 1.2.3
78f04982-7f42-4c10-9fad-2584a26a4c79Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Custom Fields Search by BestWebSoft
<1.3.2Update to 1.3.2
73442cf9-615a-47a0-860e-fb8263ae65eeApr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin
≤0.1.1Update to 0.1.2
CVE-2017-18493Apr 12, 2017
Medium6.1
Multiple Cross-Site Scripting
Subscriber by BestWebSoft
≤1.3.4Update to 1.3.5
CVE-2017-18502Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website
<1.2.1Update to 1.2.1
CVE-2017-18490Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Quotes and Tips by BestWebSoft
<1.3.2Update to 1.3.2
7c307d66-11f9-4593-9ada-252d034fd421Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Gallery Categories by BestWebSoft
<1.0.9Update to 1.0.9
9c538318-4c6f-4610-b4d4-a20005148d23Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Updater by BestWebSoft
≤1.34Update to 1.35
CVE-2017-18565Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Visitors Online by BestWebSoft
<1.0.0Update to 1.0.0
CVE-2017-18537Apr 12, 2017
Medium6.1
ReflectedCross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress
<3.96Update to 3.96
CVE-2015-9295Apr 12, 2017
Medium6.1
Reflected Cross-Site Scripting
Custom Search by BestWebSoft – WordPress Custom Search Plugin
≤1.35Update to 1.36
CVE-2017-18494Apr 12, 2017
Medium5.4
Cross-Site Scripting
AJAX Auth – Fast Logins, 2FA, Redirects
≤3.1.6Update to 3.1.7
64a0bfa9-beb3-4926-bfed-af55a101aff1Apr 11, 2017
Medium6.1
Reflected Cross-Site Scripting
Slideshow Gallery LITE
≤1.6.5Update to 1.6.6
CVE-2018-17946Apr 10, 2017
Critical9.8
SQL Injection
SpiderCalendar
≤1.5.51Update to 1.5.52
CVE-2017-7719Apr 10, 2017
High8.8
Cross-Site Request Forgery
WHIZZ
≤1.1Update to 1.1.1
CVE-2017-8099Apr 7, 2017
Medium6.5
Cross-Site Request Forgery
CopySafe Web Protection – Copy Protect Images
<2.6Update to 2.6
CVE-2017-8100Apr 7, 2017