Critical
CVE-2019-15111
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-15110
WP Front End Profile <= 0.2.1 - Stored Cross-Site Scripting
Medium
ca729178-8df0-437e-82cc-70c4975f7b47
MailPoet Newsletters <= 2.7.2 - SQL Injection
Medium
aff636ac-5bb5-4804-adf4-358ef3158d2d
MailPoet Newsletters <= 2.7.2 - Reflected Cross-Site Scripting
Medium
c89d56e2-68aa-4caf-bc1b-9aa32ec11ba3
Gravity Forms <= 2.0.6.5 - Cross-Site Scripting
High
CVE-2016-10915
Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery
Medium
CVE-2016-7168
WordPress Core < 4.6.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2016-7169
WordPress Core < 4.6.1 - Authenticated Directory Traversal to Arbitrary File Access
Medium
7bccc409-e16f-4c32-ad3b-743defd7200f
Inazo Advanced Ads Management < 1.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2016-1000139
Infusionsoft Gravity Forms Add-on <= 1.5.11 - Reflected Cross-Site Scripting
High
39564fad-a8cb-4a95-a893-d61e8ff91a53
WP-Matomo Integration (WP-Piwik) < 1.0.11 - Unauthenticated Stored Cross-Site Scripting
High
28624634-9161-4da7-89f3-88ce1d38c3ea
404 to 301 <= 2.3.0 - Unauthenticated Stored Cross-Site Scripting
Critical
af7345f9-6f62-424b-b02d-c145a90508ae
WordPress Zero Spam <= 2.1.1 - SQL Injection
Critical
CVE-2016-10955
CYSTEME Finder <= 1.3 - Arbitrary File Upload/Read
Critical
CVE-2016-10956
Mail Masta <= 1.0 - Local File Inclusion
Medium
CVE-2016-10957
Akal - Multipurpose WordPress Theme (All Versions) - Reflected Cross-Site Scripting
Medium
CVE-2016-6896
WordPress Core <= 4.5.3 - Denial of Service
Medium
CVE-2016-10763
CampTix Event Ticketing < 1.5 - Cross-Site Scripting
Medium
CVE-2016-10148
WordPress Core < 4.6 - Authorization Bypass
High
CVE-2016-6897
WordPress Core < 4.6 - Cross-Site Request Forgery
High
89a44d42-a110-4f55-ad27-2be4ccb41a16
Ninja Forms Contact Form <= 2.9.55.1 - Authenticated SQL Injection
Critical
c1bb3ab9-afbb-40e7-967a-45f737777dcf
Ajax Load More < 2.11.2 - Local File Inclusion
High
CVE-2016-10918
Photo Gallery by Supsystic <= 1.8.8 - Cross-Site Request Forgery
Medium
7cc96e83-28d9-4c6e-876f-23f1836ffd74
Google Maps <= 2.1.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.