Critical
c542b535-f75c-4f63-a3d8-7f80139ac97e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2015-1000006
Recent Backups <= 0.7 - Directory Traversal
Medium
CVE-2015-5485
The Events Calendar: Eventbrite Tickets < 3.10.2 - Cross-Site Scripting
High
6e6cda1a-e137-4c30-a66b-c10a88070c50
NativeChurch <= 1.6.1 - Arbitrary File Download
Medium
CVE-2015-5484
Plotly < 1.0.3 - Stored Cross-Site Scripting
Medium
CVE-2015-9347
Plotly <= 1.0.2 - Stored Cross-Site Scripting
Critical
135ab17b-5b91-484a-8bec-6f77d694ae62
WPE Indoshipping <= 2.5.0 - Arbitrary File Upload
High
CVE-2015-1000005
Candidate Application Form <= 1.3 - Arbitrary File Download
Medium
CVE-2015-1000008
MP3-jPlayer <= 2.4.2 - Full Path Disclosure
Critical
111c46c3-7c70-454b-8e99-1552cf0104e2
WP Front-End Repository Manager <= 1.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2015-1000004
filedownload plugin <= 1.4 - Cross-Site Scripting
High
6aaeb0df-75e8-44ac-8964-03e3389d202c
WPBook <= 2.7 - Unauthenticated Cross-Site Request Forgery
Critical
CVE-2015-1000003
filedownload < 1.4 - Blind SQL Injection
High
CVE-2015-9348
Sell Downloads <= 1.0.7 - Improper Input Validation
High
d49bd587-26fc-48fb-86aa-a043a5938d43
CP Image Store with Slideshow < 1.0.7 - Arbitrary File Download
Critical
CVE-2016-1000156
MailCWP <= 1.100 - Arbitrary File Upload
High
24c78d62-c2d0-4699-bd80-e8deef301eb3
CP Image Store with Slideshow < 1.0.6 - Arbitrary File Download
High
CVE-2015-9234
CP Contact Form with PayPal < 1.1.6 - SQL Injection
Critical
CVE-2015-1000000
MailCWP <= 1.100 - Arbitrary File Upload
High
8dc3cd92-db38-4aa4-8907-9ba7e99380f6
WR ContactForm < 1.1.10 - SQL Injection
High
CVE-2015-9233
CP Contact Form with PayPal < 1.1.6 - Cross-Site Request Forgery
High
364804a5-8699-46be-b25e-890a10134a25
WP Statistics < 9.4.1 - Authenticated Blind SQL Injection
High
CVE-2015-5482
GD bbPress Attachments < 2.3 - Directory Traversal
High
CVE-2015-9458
SEO SearchTerms Tagging 2 <=1.535 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.