CVE-2015-9322

The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.

Source: CVE-2015-9322

CVE-2015-9324

The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.

Source: CVE-2015-9324

CVE-2015-9323

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

Source: CVE-2015-9323

CVE-2017-18541

The xo-security plugin before 1.5.3 for WordPress has XSS.

Source: CVE-2017-18541

CVE-2017-18542

The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.

Source: CVE-2017-18542

CVE-2017-18543

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

Source: CVE-2017-18543

CVE-2017-18544

The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.

Source: CVE-2017-18544

CVE-2014-10376

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.

Source: CVE-2014-10376

CVE-2017-18545

The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.

Source: CVE-2017-18545

CVE-2017-18546

The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.

Source: CVE-2017-18546