Medium
55893639-3b47-4ddc-b896-4b66341a4eba
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2015-9338
WordPress File Upload <= 2.4.6 - Arbitrary File Upload
High
CVE-2015-1393
Photo Gallery by 10Web <= 1.2.10 - Authenticated SQL Injection via asc_or_desc Parameter
Medium
274e5568-b600-4085-8406-9f9d5d4fc35a
Contact Form <= 3.82 - Authorization Bypass
Critical
CVE-2015-10143
Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Update
Critical
2b24693f-6b69-4dfb-a18c-e929db09d020
Pagelines Theme < 1.4.6 - Missing Authorization
Medium
CVE-2015-1366
Pixabay Images <= 2.3 - Cross-Site Scripting
High
CVE-2015-1376
Pixabay Images <= 2.3 - Arbitrary File Upload
Critical
CVE-2015-1375
Pixabay Images <= 2.0 - Authentication Bypass to Arbitrary File Upload
High
CVE-2015-1365
Pixabay Images <= 2.3 - Directory Traversal
Critical
CVE-2015-1172
Holding Pattern <= 0.6 - Arbitrary File Upload
Medium
ea607a56-ed6e-44dd-be42-a0b0d970742e
Store Locator Plus < 4.2.27 - Email Injection
High
CVE-2014-8802
Pie Register <= 2.0.13 - Missing Authorization
High
CVE-2015-10136
GI-Media Library < 3.0 - Directory Traversal
Medium
CVE-2014-9570
Simple Security <= 1.1.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2014-100027
Slimstat Analytics <= 3.5.5 - Stored Cross-Site Scripting
Critical
8b783b94-7135-49c1-aff2-1c2ea24bbfcd
CIP4 Folder Download Widget < 1.11 - Local File Inclusion
Critical
CVE-2015-1055
Photo Gallery by 10Web <= 1.2.7 - Unauthenticated Blind SQL Injection via order_by Parameter
Critical
CVE-2014-7957
Pods <= 2.4.3 - Multiple Cross-Site Request Forgery
Medium
CVE-2014-7956
Pods <= 2.4.3 - Cross-Site Scripting
Medium
239bdac1-c14b-42ff-bee5-130d0bf3394c
Custom Sidebars < 2.1.0.2 - Reflected Cross Site Scripting
Medium
CVE-2015-9319
Greg's High Performance SEO <= 1.6.1 - Reflected Cross-Site Scripting
Medium
a3bdccfd-6b82-4a76-81f1-eb0f6d62d413
Slideoptinprox (Unspecified Version) - Cross-Site Scripting
High
CVE-2014-9308
Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.