Critical
CVE-2015-9301
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2015-2293
Yoast SEO <= 1.7.3.3 - Cross-Site Request Forgery
High
CVE-2015-2791
WPML <= 3.1.9 - Arbitrary Deletion of Content
Critical
570f680b-b688-49ad-9eed-0bc966a4cdf7
Faction <= 1.1.1 - Arbitrary Options Update
Medium
24c3d004-da8b-40ec-b52e-6923d4c824e8
Daily Edition <= 1.6.2 - Cross-Site Scripting
Critical
0ae243af-619f-4405-b1e0-9b44c1869501
Ultimate Member < 1.0.84 - Authorization Bypass to Arbitrary File Upload/Delete
Critical
CVE-2015-2314
WPML <= 3.1.9 - SQL Injection via lang Parameter
High
ac45d8fe-4b79-4b2c-998e-e51da7a37e40
Custom Community 2.0 - 2.0.24 - Stored Cross-Site Scripting
Critical
84019c69-32fd-4331-95d7-53ea1aaff616
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass
High
518771c1-b52b-47b7-99f1-4f40115ba4cf
Pie Register < 2.0.15 - Cross-Site Scripting
Critical
CVE-2015-10135
WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload
Medium
f71ab7bb-886a-4661-92b5-d9ac52901494
Download Monitor <= 1.6.3 - Directory Listing to Information Disclosure
Critical
fac29bb3-e534-4bee-9974-5ccac7d445db
Daily Edition <= 1.6.2 - Arbitrary File Upload
Medium
daaa6507-cd8a-40c9-95af-34cc96551417
Tweet Wheel <= 0.2 - Missing Authorization Checks
High
cede59f9-611f-4da4-8140-181bd0a469d5
Contact Form by FormGet < 5.3.1 - Authenticated Stored Cross-Site Scripting
Critical
6aeb0352-66ab-45d4-ad61-f425d7d41f45
Daily Edition <= 1.6.2 - SQL Injection
Medium
CVE-2015-10105
IP Blacklist Cloud <= 3.42 - Authenticated (Admin+) Path Traversal
High
82619274-4339-44ba-b50c-d1194c34b695
IgnitionDeck Crowdfunding Platform <= 1.1.6 - Missing Authorization
Medium
7e9dcedd-aa81-47c4-9fc5-cecc7bc394b5
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2015-0894
All In One WP Security & Firewall <= 3.8.7 - SQL Injection
Low
CVE-2015-0895
All In One WP Security & Firewall <= 3.8.9 - Cross-Site Request Forgery
Critical
9d8551b8-67b9-45a8-9357-9e42fb451606
Ya'aburnee <= 1.0.7 and Dignitas <= 1.1.9 - Privilege Escalation
Medium
691c0f3b-b723-4310-b4df-ed3e1db9d548
WP Plugin Info Card < 2.3.7 - Cross-Site Scripting
Medium
CVE-2015-1874
Contact Form DB <= 2.8.29 - Cross-site request forgery via a request in the CF7DBPluginSubmissions page to wp-admin/admin.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.