Medium
CVE-2014-8758
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2014-7238
Contact Form Integrated With Google Maps 1.0 - 2.4 - Stored Cross-Site Scripting
High
CVE-2014-8607
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
High
CVE-2014-8603
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution
Medium
CVE-2014-8606
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Directory Traversal
High
CVE-2014-8605
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure
High
CVE-2014-8604
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
Medium
CVE-2014-7240
Easy Contact Form Solution <= 1.6 - Stored Cross-Site Scripting
Medium
CVE-2014-10377
cformsII <= 13.1 - Cross-Site Scripting
High
CVE-2014-9338
O2tweet <= 0.0.4 - Cross-Site Request Forgery
Medium
CVE-2014-10392
Cforms <= 10.1 - Cross-Site Scripting
Medium
CVE-2014-7182
WP Google Maps <= 6.0.26 - Reflected Cross-Site Scripting
Medium
CVE-2014-10393
cformsII <= 10.4 - Cross-Site Scripting
Critical
CVE-2014-100003
YourMembers <= 3.0 - SQL Injection
High
CVE-2014-8334
WP-DBManager < 2.72 - OS Command Injection
High
CVE-2014-8335
WP-DBManager < 2.72 - Command Injection
Medium
CVE-2014-8336
WP DB Manager < 2.7.2 - Arbitrary File Read
High
CVE-2014-9454
Simple Sticky Footer <= 1.3.2 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
1833720c-e714-4ec5-9ebb-24a4612195d6
Work The Flow <= 2.3.1 - Arbitrary File Upload
Medium
CVE-2014-7139
Contact Form DB <= 2.8.19 - Cross-Site Scripting
Medium
CVE-2014-6243
EWWW Image Optimizer <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2014-7138
Simple Calendar – Google Calendar Plugin < 2.0.4 - Reflected Cross-Site Scripting
Critical
CVE-2014-7297
Enfold < 3.0.1 - Unspecified Vulnerability
High
CVE-2014-7959
BulletProof Security < .51.1 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.