High
CVE-2015-9443
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2015-4697
Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery
High
CVE-2015-9322
Erident Custom Login and Dashboard <= 3.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
c6b95cc2-c40b-40db-abd2-d66978cf55d1
Salem Theme <= 1.5.5 - DOM-based Cross-Site Scripting
High
461d5d5a-7bc2-4855-bc40-0edb9c538c33
Ultimate Member 1.2.98 - 1.2.997 - Reflected Cross-Site Scripting
Medium
CVE-2015-10001
WP-Stats < 2.52 - Cross-Site Request Forgery
High
eb32a095-7d2b-4a57-9d91-f79fb3486f9a
Copy or Move Comments < 1.0.1 - Cross-Site Scripting and SQL Injection
Medium
39a74c20-42a2-4099-8e6c-9989a3ba081d
Salient < 5.5.53 - DOM Cross-Site Scripting
Medium
beadd35b-2bce-431e-8347-2d1a87d02f01
Users To CSV <= 1.4.5 - Cross-Site Request Forgery
Medium
CVE-2015-9444
Altos Connect <= 1.3.0 - Cross-Site Scripting
Medium
CVE-2015-10090
WordPress Landing Pages <= 1.8.7 - Cross-Site Scripting
High
CVE-2015-4694
Zip Attachments <= 1.5 - Directory Traversal
High
CVE-2015-4703
WordPress Renaming Tool by Vlajo <= 1.0 - Path Traversal
Critical
f2ed5e51-8783-4b7f-9177-c116bf0fad44
Frontend File Manager <= 3.7 - Arbitrary File Upload
Critical
CVE-2015-9480
RobotCPA <= 5 - Unauthenticated Local File Inclusion
Medium
CVE-2015-5065
PayPal Currency Converter BASIC for WooCommerce <= 1.3 - Path Traversal to Arbitrary File Read
Medium
a276d70d-3ad7-49e0-a25c-8089cdd581da
AddThis <= 5.0.2 - Authenticated Stored Cross-Site Scripting
High
88b3a69d-2c94-48e6-b965-8a67b2fe42b2
WooCommerce <= 2.3.10 - PHP Object Injection
High
3bed2531-1a7d-49d9-91c9-d9e7357e5613
Erident Custom Login & Dashboard <= 3.4.1 - Cross-Site Request Forgery
Critical
CVE-2015-4455
Aviary Image Editor Add-on For Gravity Forms <= 3.0 (Beta r7) - Arbitrary File Upload
Critical
CVE-2015-4614
Easy2Map <= 1.2.4 - SQL Injection
Critical
CVE-2015-4615
Easy2Map Photos <= 1.0.9 - SQL Injection
Medium
CVE-2015-4010
Encrypted Contact Form < 1.1 - Cross-Site Scripting
Medium
CVE-2015-4617
Easy2map-photos <= 1.0.9 - Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.