Medium
22602d63-235a-4bdb-b907-e61be04e96c5
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2013-5977
Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Request Forgery
High
1ec45848-33b1-4088-ba06-9a12d291120e
Better WP Security <= 3.5.3 - Stored Cross-Site Scripting
High
1e223e0e-959f-498e-8c0e-daae36bd28cb
WP Easy Gallery <= 2.7 - SQL Injection
Critical
CVE-2014-10379
Yoast Duplicate Post <= 2.5 - SQL Injection
Medium
CVE-2013-4625
Duplicator – WordPress Migration Plugin <= 0.4.4 - Cross-Site Scripting
Medium
1b313177-d329-40a4-8a90-ce14b5cb90a9
Alpine PhotoTile For Instagram < 1.2.9 - Cross-Site Scripting
Critical
14f86410-a21c-43ee-8d78-6fcce3a5b99b
Uploader <= 1.0.4 - Arbitrary File Upload
High
10a54a3b-db6d-45c5-9280-7042ccc17ccd
Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting
Critical
CVE-2012-3814
Font Uploader <= 1.3 - Arbitrary File Upload
Medium
0e4c0500-9081-446e-b34b-968c718dfce0
Ultimate TinyMCE < 3.6 - Cross-Site Scripting
Medium
CVE-2011-4926
Adminimize <= 1.7.21 - Cross-Site Scripting
Medium
CVE-2013-1407
Events Manager < 5.3.5 & Events Manager Pro < 2.2.9 - Cross-Site Scripting
Critical
CVE-2014-4944
BSK PDF Manager <= 1.4 - Authenticated SQL Injection
High
CVE-2014-2598
Quick Page/Post Redirect Plugin < 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2014-4589
WP Silverlight Media Player <= 0.8 - Cross-Site Scripting
Medium
CVE-2014-4846
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 2.5 - Cross-Site Scripting
Critical
08c14611-c785-484d-9fdf-7d71c39f63df
Global Flash Gallery <= 0.15.1 - SQL Injection
Medium
08bebfbd-08f4-45d9-9570-46f5c848afca
User Meta – User Profile Builder and User management plugin 1.1.1 - Arbitrary File Upload
Medium
0753e172-3ff7-42a9-8651-d12573406d11
WP eCommerce <= 3.8.9 - Cross-Site Scripting
Critical
05a81b0e-2d25-44b5-b791-5b2aed94bbab
MyFTP <= 1.1 - SQL Injection
High
01f0b785-418e-468c-b9f8-53cd46aca881
Mingle Forum < 1.0.34 - Unauthenticated SQL Injection
High
CVE-2014-4664
Wordfence Security – Firewall & Malware Scan <= 5.1.3 - Cross-Site Scripting
High
CVE-2014-9099
WhyDoWork AdSense <= 1.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.