Medium
CVE-2014-10012
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
db5e26cf-e6c7-4b79-807a-643a1effd2a0
Link Library <= 5.8.10.6 - Reflected Cross-Site Scripting
Medium
bb5178f4-356b-4352-96ca-500e49006f8a
ThemeBlvd Themes/Plugins (Various Versions) - Missing Authorization Checks
Medium
CVE-2014-8955
Contact Form Clean and Simple < 4.4.1 - Cross-Site Scripting
Medium
CVE-2014-8815
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.6 - Reflected Cross-Site Scripting
High
CVE-2014-8803
Smart Forms – when you need more than just a contact form <= 2.1.0 - Missing Authorization
Medium
CVE-2014-8814
WP Photo Album Plus <= 5.4.17 - Reflected Cross-Site Scripting
Medium
CVE-2014-8749
BulletProof Security < .51.1 - Server-Side Request Forgery
High
CVE-2014-8807
Contact Bank – Contact Form Builder for WordPress <= 2.0.69 - Stored Cross-Site Scripting
High
66b91fe9-ceb3-485c-bf5f-a672656d4e86
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload
Critical
CVE-2014-8621
Store Locator 2.3 - 3.11 - SQL Injection
Medium
CVE-2014-7958
BulletProof Security < .51.1 - Cross-Site Scripting
Medium
CVE-2014-10391
WP Support Plus Responsive Ticket System <= 4.0 - JavaScript Injection
Medium
CVE-2014-8087
post highlights 2.0 - 2.6 - Cross-Site Scripting
High
CVE-2014-10076
Database Backup for WordPress <= 2.2.4 - Missing Authorization
High
e92f35dc-7e19-464a-bb8a-40a662e2270a
WP eCommerce <= 3.8.14.3 - Missing Authorization
Medium
CVE-2014-8492
Profile Builder <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2014-8491
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 4.25 - Sensitive Data Exposure
Critical
CVE-2014-8586
Calendar Event Multi View < 1.0.2 - SQL Injection
Critical
CVE-2014-8739
Creative Contact Form < 1.0.0 - Arbitrary File Upload
Critical
a9c7d539-2ea7-4f72-b0d2-6082e26918ce
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.3.58 - SQL Injection
Critical
4d3fd9b8-b9b7-4884-9188-6bf255058323
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.3.58 - SQL Injection
Medium
CVE-2014-7151
NEX-Forms Lite – WordPress Contact Form builder < 3.4 - Cross-Site Scripting
High
CVE-2014-10382
Featured Comments < 1.2.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.