Medium
CVE-2014-4593
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2014-4558
SwipeHQ Payment Gateway WooCommerce <= 2.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2014-4604
Your Text Manager <= 0.3.0 - Cross-Site Scripting
Medium
CVE-2014-4516
BIC Media Widget <= 1.0 - Cross-Site Scripting
Critical
CVE-2014-4938
WP Rss Poster <= 1.0.0 - SQL Injection
High
8a3da2af-2273-44ff-addd-1ac8a75e1c3d
All in One Social Lite <= 1.0 - Server-Side Request Forgery
High
CVE-2014-5185
Quartz <= 1.01.1 - SQL Injection
High
CVE-2014-5182
YAWPP (Yet Another WordPress Petition Plugin) <= 1.2.1 - Authenticated SQL Injection
High
CVE-2014-4940
Tera Charts < 1.0 - Directory Traversal
Medium
CVE-2014-4524
WP Easy Post Types < 1.4.4 - Cross-Site Scripting
Medium
CVE-2014-4520
DMCA WaterMarker < 1.1 - Cross-Site Scripting
Medium
CVE-2014-4597
WordPress Social Invitations – Lite <= 1.4.4.2 - Reflected Cross-Site Scripting
High
CVE-2014-5184
stripShow Plugin <= 2.5.2 - SQL Injection
High
CVE-2014-4937
BookX <= 1.7 - Path Traversal
High
CVE-2014-4939
ENL Newsletter <= 1.0.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2014-4526
efence <= 1.3.2 - Multiple Cross-Site Scripting
Medium
CVE-2014-4514
WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 < 3.7.0 - Cross-Site Scripting
Medium
CVE-2014-4554
SS Downloads <= 1.4.4.1 - Cross-Site Scripting
Medium
CVE-2014-4574
WebEngage Feedback, Survey and Notification < 2.0.1 - Cross-Site Scripting
High
CVE-2014-9292
jRSS Widget <= 1.2 - Server-Side Request Forgery
High
CVE-2014-5186
All Video Gallery Plugin for WordPress <= 1.2 - Authenticated SQL Injection
High
1419f089-7656-43a1-aeee-c33eef604c84
Ultimate Product Catalog < 2.1.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2014-4527
EnvialoSimple: Email Marketing y Newsletters < 1.98 - Cross-Site Scripting
Medium
CVE-2014-5181
Last.fm Rotation <= 1.0 - Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.