Medium
CVE-2015-7683
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2015-7377
Pie Register – User Registration Forms < 2.0.19 - Reflected Cross-Site Scripting
High
01b3013f-60b9-449b-a2a9-64e37a1454ef
JM Twitter Cards < 6.2 - Full Path Disclosure
High
CVE-2015-10140
WordPress Infinite Scroll – Ajax Load More <= 2.8.1.1 - Arbitrary File Upload
Critical
CVE-2015-9335
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms < 1.1.1 - SQL Injection
Critical
CVE-2015-7670
Support Ticket System < 1.2.1 - SQL Injection
High
CVE-2015-9470
History Collection <=1.1.1 - Arbitrary File Download
Medium
CVE-2015-7668
Easy2Map <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2015-7357
uDesign Theme 2.3.0 - 2.7.9 - Unauthenticated DOM Cross-Site Scripting
Critical
CVE-2015-7669
Easy2Map <= 1.2.9 - Directory Traversal and Local File Inclusion
Medium
CVE-2015-7667
ResAds < 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2015-7666
Payment Form for PayPal Pro < 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2015-9385
Quotes and Tips by BestWebSoft < 1.20 - Cross-Site Scripting
Medium
455d7ee8-9a5a-41f6-b0ae-c55f04b41e52
AdPush <= 1.29 - Reflected Cross-Site Scripting
Medium
CVE-2015-9384
Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
a1c731b9-8862-4140-b5e8-58132113e22c
Jetpack <= 3.7.1 - Stored Cross-Site Scripting
Medium
72094f97-c1cc-48df-9c88-1352e6d6e67e
Jetpack <= 3.7.1 - Information disclosure
High
CVE-2015-9406
mTheme-Unus < 2.3 - Directory Traversal to Unauthenticated Arbitrary File Read
High
39b6a1c7-2f8a-49e9-8807-a53a25524018
Ninja Forms Contact Form <= 2.9.27 - CSV Injection
High
CVE-2015-5227
WordPress Landing Pages <= 1.9.0 - Unauthenticated Remote Command Execution
Critical
741915a7-c88d-41e1-9347-1d5d6494d051
mTheme-Unus (All Versions) - Local File Inclusion
Critical
CVE-2015-7319
Appointment Booking Calendar <= 1.1.7 - SQL Injection
Medium
CVE-2015-7320
Appointment Booking Calendar <= 1.1.7 - Multiple Reflected Cross-Site Scripting
High
634ccd08-4f2e-4a06-8c64-dfe38fa3a481
WP Super Cache <= 1.4.4 - PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.