2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-18561——The embed-comment-images plugin before 0.6 for WordPress has XSS.
CVE-2017-18559MEDIUM6.1The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.
CVE-2017-18535——The smokesignal plugin before 1.2.7 for WordPress has XSS.
CVE-2017-18525——The megamenu plugin before 2.4 for WordPress has XSS.
CVE-2017-18521——The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage...
CVE-2017-18516——The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2017-18564——The sender plugin before 1.2.1 for WordPress has multiple XSS issues.
CVE-2017-18563——The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.
CVE-2017-18565——The updater plugin before 1.35 for WordPress has multiple XSS issues.
CVE-2017-18560——The content-audit plugin before 1.9.2 for WordPress has XSS.
CVE-2017-18558——The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
CVE-2017-18557——The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
CVE-2017-18556——The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
CVE-2017-18555——The booking-sms plugin before 1.1.0 for WordPress has XSS.
CVE-2017-18554——The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.
CVE-2017-18553——The ad-buttons plugin before 2.3.2 for WordPress has XSS.
CVE-2017-18540MEDIUM6.1The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.
CVE-2017-18539MEDIUM6.1The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.
CVE-2017-18538MEDIUM6.1The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.
CVE-2017-18537——The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
CVE-2017-18536——The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
CVE-2017-18534——The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.
CVE-2017-18566——The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
CVE-2017-18533——The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.
CVE-2017-18532——The realty plugin before 1.1.0 for WordPress has multiple XSS issues.

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now