High
bd563af4-b97f-4746-a5e9-8dc5dfda272e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2014-7153
Image Gallery - Responsive Photo Gallery <= 1.0.7 - SQL Injection
Medium
e438a090-1a73-450d-9325-276e45eee9ee
Gallery – Photo Albums Plugin < 1.3.03 - Multiple Cross-Site Request Forgery
Medium
569c8faf-bd2a-4c61-a8c7-d4cab36e5727
Ready! Coming Soon <= 0.5.0 Stored Cross-Site Scripting and Cross-Site Request Forgery
High
35d80441-6cbe-4bd4-a891-a4a1d24c77ec
Easy Media Gallery Pro <= 1.2.59 - Cross-Site Request Forgery and Cross-Site Scripting
High
CVE-2014-5460
Slideshow Gallery < 1.4.7 - Arbitrary File Upload
Medium
CVE-2014-0173
Jetpack < 2.9.3 - Security Bypass
Medium
eeae2042-ccad-4e4b-a321-8ea58af9d775
WooCommerce – Store Exporter <= 1.7.5 - Stored Cross-Site Scripting
Medium
b59f13b9-8ad3-44a7-90a0-1f959ba55700
WooCommerce Store Exporter <= 1.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2014-10385
Memphis Documents Library <= 2.6.16 - Cross-Site Scripting
High
416ab7d5-9f3b-4ccc-9a0f-bfe5d38b6f97
KenBurner Slider (All Versions) - Path Traversal
High
CVE-2014-6059
Advanced Access Manager <= 2.8.2 - Arbitrary File Overwrite
Medium
CVE-2014-125110
WordPress File Upload <= 2.4.3 - Reflected Cross-Site Scripting
High
CVE-2014-5368
WP Source Control < 3.1.1 - Directory Traversal
Medium
CVE-2014-5196
Improved User Search in Backend <= 1.2.5 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2014-5347
Disqus Comment System < 2.76 - Cross-Site Request Forgery
High
CVE-2014-8375
GB Gallery Slideshow <= 1.5 - SQL Injection
Medium
CVE-2014-5344
MobiLoud – WordPress Mobile Apps – Convert your WordPress Website to Native Mobile Apps < 2.3.8 - Cross-Site Scripting
Medium
CVE-2014-125100
Job Board by BestWebSoft <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2014-5199
WordPress File Upload < 2.4.2 - Cross-Site Request Forgery
High
CVE-2014-5190
SI CAPTCHA Anti-Spam < 2.7.6 - Reflected Cross-Site Scripting
High
CVE-2014-125095
Contact Form Plugin <= 3.81 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2018-17074
Feed Statistics < 4.0 - Open Redirect
Medium
CVE-2014-125103
BestWebSoft's Twitter <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.