High
a7c32efa-1872-4302-a947-dc0005080e55
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
87ca4c05-b9fc-4932-be4b-beb57ca3bb7e
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
Critical
6b456815-ffdf-41fb-b4a8-0f22fd059d34
AJAX Store Locator <= 1.2 - SQL Injection
Medium
f7cb3540-ffdb-4b4c-a518-4ca8232ab53f
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
b0907cb0-b101-4c88-9a8b-b35133e1d0a2
MiwoFTP < 1.0.6 - Cross-Site Request Forgery leading to Remote Code Execution
Medium
CVE-2014-4518
Contact Form by ContactMe.com <= 2.3 - Cross-Site Scripting
High
CVE-2015-9337
Profile Builder <= 2.1.3 - Missing Access Controls
High
1ab0d9f3-0185-41f1-bab5-f47f828fa79c
MiwoFTP < 1.0.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
e6de7a25-3079-4023-9faa-7a63952afe25
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Medium
c6168ee5-5df3-4d79-96bb-95029f2ac54b
iThemes Security <= 4.6.12 - Stored Cross-Site Scripting
Medium
CVE-2015-3325
WP Symposium < 15.4 - SQL Injection
High
2db8e79f-e70b-421f-8120-7aa65e704deb
MiwoFTP < 1.0.5 - Arbitrary File Download
Medium
CVE-2015-9493
My Wish List < 1.4.2 - Cross-Site Scripting
Critical
c96507cf-3c2d-4516-92f5-d08384aa6b1a
WORDPRESS VIDEO GALLERY <= 2.8 - SQL Injection
Critical
CVE-2015-10137
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
Critical
CVE-2015-9333
cformsII < 14.6.10 - SQL Injection
Medium
c342fe87-59f3-43e9-8694-cc2551650a91
Fusion Engage <= 1.0.5 - Local File Inclusion
High
3762cd92-604a-4dac-a09e-6b4a08c4d804
Duplicator <= 0.5.14 - SQL Injection
High
5aeca3b6-6b1b-40b5-8824-de4a90c7ddc3
Gantry 4 Framework <= 4.1.3 - Remote Code Execution
High
3ba84be8-c6dc-4cb7-b93c-38c69ab07154
WP REST API (WP API) < 1.2.1 - Sensitive Information Disclosure
Critical
1e37e54b-9c00-4d04-9c81-791242d45d6c
iDump iPhone to WordPress Photo Uploader <= 1.8 - Arbitrary File Upload
Critical
CVE-2015-9530
Easy Digital Downloads – Upload File <= 1.0.4 - Arbitrary File Upload/Deletion
High
CVE-2015-3986
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 Cross-Site Request Forgery
Medium
CVE-2015-3429
Twenty Fifteen Theme <= 1.1 & WordPress Core < 4.2.2 - Cross-Site Scripting via example.html
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.