Medium
CVE-2015-9390
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2015-9344
Link Log – external link click monitor < 2.1 - SQL Injection
Medium
CVE-2015-9391
YAWPP (Yet Another WordPress Petition Plugin) <= 1.2.2 - Cross-Site Scripting
High
7bd89bd9-4f99-4828-bacc-15d2cfe13066
Ninja Forms Contact Form <= 2.9.28 - Stored Cross-Site Scripting
Medium
CVE-2015-20019
Content text slider on post < 6.9 - Cross-Site Scripting
Medium
CVE-2015-9393
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Scripting
High
CVE-2015-7527
Cool Video Gallery <= 1.9 - Authenticated Command Injection
High
da025593-ad11-4a48-97e1-d31c6f0e62ea
Breezing Forms <= 1.2.7.30 - SQL Injection
Medium
CVE-2015-8354
Ultimate Member <= 1.3.28 - Reflected Cross-Site Scripting
Medium
CVE-2015-8353
Role Scoper (Obsolete – Please install PublishPress Permissions) < 1.3.67 - Reflected Cross-Site Scripting
High
CVE-2015-9394
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Request Forgery
Medium
CVE-2015-9392
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Scripting via p_name parameter
Medium
d10364ed-179d-4506-a6f0-42b03c005242
Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting
High
CVE-2015-9395
Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection
Critical
CVE-2014-9173
Google Doc Embedder < 2.5.17 - SQL Injection
Unrated
362
Resize Image On The Fly and Cache
Medium
CVE-2015-9396
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting
Medium
f268974a-db92-42d2-9e1d-f990ea067740
Contact Form Manager <= 1.4.1 - Reflected Cross-Site Scripting
High
9dd71a06-b3b5-431a-b6da-3b7db3a3907c
Plugin Central < 2.5.1 - Reflected Cross-Site Scripting
Medium
836e3ca0-9f41-4ab2-a9bf-64a593f37c8a
WP Keyword link <= 1.7 - Cross-Site Scripting
High
74f8af2b-69fb-41db-b978-62709322aed3
Email Newsletter <= 20.13.6 - Reflected Cross-Site Scripting
High
6ef8bf27-3b20-4d90-8d29-b9713d2c41d6
Contact Form Maker <= 1.7.30 - Authenticated (Admin+) SQL Injection
Critical
CVE-2015-7517
Double Opt-In for Download <= 2.0.8 - SQL Injection
High
CVE-2015-9399
WP-Stats-Dashboard <= 2.9.4 - Authenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.