High
a0850b88-09f0-4da8-a9be-1b4aacf610e0
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2014-9032
WordPress Core < 4.0.1 - Cross-Site Scripting via media-playlists
High
CVE-2015-2220
Ninja Forms Contact Form <= 2.8.8 - Stored Cross-Site Scripting
Medium
CVE-2014-9035
WordPress Core < 4.0.1 - Cross-Site Scripting
High
CVE-2014-9039
WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset
Medium
CVE-2014-9031
WordPress Core < 4.0.1 - Cross-Site Scripting via Shortcode Brackets
Medium
CVE-2014-10395
Polls CP < 1.0.1 - Cross-Site Scripting
Medium
CVE-2014-9034
WordPress Core < 4.0.1 - Denial of Service via Long Password
Critical
CVE-2014-9178
SP Project & Document Manager < 2.4.4 - Multiple SQL Injection
High
CVE-2014-9038
WordPress Core < 4.0.1 - Server-Side Request Forgery
Medium
CVE-2014-125096
Gallery Manager <= 1.5.12 - Cross-Site Scripting
High
1d14779f-3ee5-4a55-b49d-e9162db2f4a2
WP Statistics < 8.3.1 - Multiple Cross-Site Scripting
High
CVE-2014-9037
Wordpress Core < 4.0.1 - Hash Collision
Medium
CVE-2014-9036
WordPress Core < 4.0.1 - Cross-Site Scripting via CSS
High
efdf76b2-7640-4384-a72b-789159eb9c86
Watu Quiz <= 2.5.0.1 - Stored Cross-Site Scripting
High
CVE-2014-10390
WP Support Plus Responsive Ticket System <= 4.1 - Directory Traversal
Critical
CVE-2014-10389
WP Support Plus Responsive Ticket System <= 4.1 - Improper Authentication
High
CVE-2014-8801
Paid Memberships Pro < 1.7.15 - Directory Traversal
Medium
CVE-2014-9179
SupportEzzy Ticket System Plugin <= 1.2.5 - Cross-Site Scripting
High
CVE-2014-8799
DukaPress < 2.5.4 - Directory Traversal
Medium
CVE-2014-8584
SpiderVPlayer <= 1.5.1 - Cross-Site Scripting
Critical
CVE-2014-8877
CM Download Manager <= 2.0.3 - Code Injection
Medium
CVE-2014-10013
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - SQL Injection
High
fca24e26-149f-4805-9097-f7d11485a690
Contact Form by WD – responsive drag & drop contact form builder tool <= 1.7.18 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.