Critical
CVE-2015-4133
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2015-10138
Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload
Medium
CVE-2015-2324
Photo Gallery by 10Web <= 1.2.12 - Authenticated Cross-Site Scripting
Medium
b5635423-d17a-4f04-a164-64bf141b6bb4
IP Blacklist Cloud < 3.43 - Directory Traversal
High
CVE-2015-2329
WooCommerce <= 2.3.5 - Stored Cross-Site Scripting
High
CVE-2015-2062
Responsive Slider – Image Slider – Slideshow for WordPress < 2.7.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2015-9330
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection
Medium
22a0f10f-0a67-4f4a-99db-a625bec20bdc
Image Gallery - Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via thumbtext
Medium
0793a054-b213-4519-bc30-ce835979248b
Custom Field Suite <= 2.4 - Missing Authorization
High
e597b677-e298-4507-86a5-70a93a9afd6e
SpiderCalendar <= 1.4.13 - Cross-Site Request Forgery
High
CVE-2015-2292
Yoast SEO <= 1.7.3.3 - Blind SQL Injection
Medium
CVE-2015-2315
WPML < 3.1.9 - Cross-Site Scripting
Critical
CVE-2015-9301
WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms < 3.2.0 - SQL Injection
High
CVE-2015-2293
Yoast SEO <= 1.7.3.3 - Cross-Site Request Forgery
High
CVE-2015-2791
WPML <= 3.1.9 - Arbitrary Deletion of Content
Critical
570f680b-b688-49ad-9eed-0bc966a4cdf7
Faction <= 1.1.1 - Arbitrary Options Update
Medium
24c3d004-da8b-40ec-b52e-6923d4c824e8
Daily Edition <= 1.6.2 - Cross-Site Scripting
Critical
0ae243af-619f-4405-b1e0-9b44c1869501
Ultimate Member < 1.0.84 - Authorization Bypass to Arbitrary File Upload/Delete
Critical
CVE-2015-2314
WPML <= 3.1.9 - SQL Injection via lang Parameter
High
ac45d8fe-4b79-4b2c-998e-e51da7a37e40
Custom Community 2.0 - 2.0.24 - Stored Cross-Site Scripting
Critical
84019c69-32fd-4331-95d7-53ea1aaff616
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass
High
518771c1-b52b-47b7-99f1-4f40115ba4cf
Pie Register < 2.0.15 - Cross-Site Scripting
Critical
CVE-2015-10135
WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload
Medium
f71ab7bb-886a-4661-92b5-d9ac52901494
Download Monitor <= 1.6.3 - Directory Listing to Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.