2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18546 | — | — | 0.6% | Aug 16, 2019 | The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF. |
| CVE-2017-18545 | — | — | 1.3% | Aug 16, 2019 | The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input. |
| CVE-2017-18544 | — | — | 0.6% | Aug 16, 2019 | The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF. |
| CVE-2017-18543 | — | — | 1.8% | Aug 16, 2019 | The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations. |
| CVE-2017-18542 | — | — | 1.4% | Aug 16, 2019 | The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues. |
| CVE-2017-18541 | — | — | 0.9% | Aug 16, 2019 | The xo-security plugin before 1.5.3 for WordPress has XSS. |
| CVE-2017-18548 | — | — | 1.8% | Aug 16, 2019 | The note-press plugin before 0.1.2 for WordPress has SQL injection. |
| CVE-2017-14232 | — | — | 1.2% | Aug 15, 2019 | The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a deni... |
| CVE-2017-18513 | — | — | 0.6% | Aug 14, 2019 | The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface. |
| CVE-2017-18512 | — | — | 0.6% | Aug 14, 2019 | The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF. |
| CVE-2017-18511 | — | — | 0.6% | Aug 14, 2019 | The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF. |
| CVE-2017-18510 | — | — | 0.6% | Aug 14, 2019 | The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actio... |
| CVE-2017-18515 | — | — | 2.5% | Aug 14, 2019 | The wp-statistics plugin before 12.0.8 for WordPress has SQL injection. |
| CVE-2017-18488 | — | — | 0.9% | Aug 13, 2019 | The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues. |
| CVE-2017-18487 | — | — | 1.5% | Aug 13, 2019 | The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues. |
| CVE-2017-18507 | — | — | 0.9% | Aug 13, 2019 | The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS. |
| CVE-2017-18498 | — | — | 0.9% | Aug 13, 2019 | The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search. |
| CVE-2017-18497 | — | — | 0.9% | Aug 13, 2019 | The liveforms plugin before 3.4.0 for WordPress has XSS. |
| CVE-2017-18496 | — | — | 1.4% | Aug 13, 2019 | The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues. |
| CVE-2017-18495 | — | — | 0.9% | Aug 13, 2019 | The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS. |
| CVE-2017-18494 | — | — | 1.4% | Aug 13, 2019 | The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues. |
| CVE-2017-18493 | — | — | 1.4% | Aug 13, 2019 | The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues. |
| CVE-2017-18492 | — | — | 1.5% | Aug 13, 2019 | The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues. |
| CVE-2017-18491 | — | — | 1.5% | Aug 13, 2019 | The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. |
| CVE-2017-18490 | — | — | 1.5% | Aug 13, 2019 | The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now