Medium
CVE-2015-9368
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2015-9294
All In One WP Security & Firewall <= 3.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2015-9373
PayPal Pro Add-on for iThemes Exchange < 1.1.0 - Cross-Site Scripting
Medium
CVE-2015-9536
Easy Digital Downloads (EDD) Twenty-Twelve < 1.1.1 - Cross-Site Scripting
Medium
CVE-2015-9515
Easy Digital Downloads – htaccess Editor < 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-9377
iThemes Builder Depot Theme < 5.0.30 - Reflected Cross-Site Scripting
Medium
CVE-2015-9523
Easy Digital Downloads – Recommended Products <= 1.2.3.2 - Cross-Site Scripting
Medium
03ddef11-04cb-4639-afb0-f123b339b9ae
All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-9527
Easy Digital Downloads – Simple Shipping <= 2.1.3 - Cross-Site Scripting
Medium
CVE-2015-10110
TinyChat Room Spy <= 1.2.8 - Reflected Cross-Site Scripting
High
784e3b21-08f5-4cbc-b726-fe60e1faefea
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.4.95 - SQL Injection
High
bfe10de1-1c1f-437b-8851-7024fce753be
WP-Mon <= 0.5.1 - Arbitrary File Download
High
a7c32efa-1872-4302-a947-dc0005080e55
Citizen Space <= 1.1 - Reflected Cross-Site Scripting
Medium
87ca4c05-b9fc-4932-be4b-beb57ca3bb7e
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
Critical
6b456815-ffdf-41fb-b4a8-0f22fd059d34
AJAX Store Locator <= 1.2 - SQL Injection
Medium
f7cb3540-ffdb-4b4c-a518-4ca8232ab53f
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
b0907cb0-b101-4c88-9a8b-b35133e1d0a2
MiwoFTP < 1.0.6 - Cross-Site Request Forgery leading to Remote Code Execution
Medium
CVE-2014-4518
Contact Form by ContactMe.com <= 2.3 - Cross-Site Scripting
High
CVE-2015-9337
Profile Builder <= 2.1.3 - Missing Access Controls
High
1ab0d9f3-0185-41f1-bab5-f47f828fa79c
MiwoFTP < 1.0.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
e6de7a25-3079-4023-9faa-7a63952afe25
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Medium
c6168ee5-5df3-4d79-96bb-95029f2ac54b
iThemes Security <= 4.6.12 - Stored Cross-Site Scripting
Medium
CVE-2015-3325
WP Symposium < 15.4 - SQL Injection
High
2db8e79f-e70b-421f-8120-7aa65e704deb
MiwoFTP < 1.0.5 - Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.