Export limit exceeded: 51987 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,987

Export CSV
CVE-2017-18600

The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Ncrafts
Products
Formcraft
CVE-2017-18598

The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.

CVSS 3.1 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Designmodo
Products
Qards
CVE-2017-18593

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Updraftplus
Products
Updraftplus
CVE-2017-18563

The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Swimordiesoftware
Products
Rsvp