Medium
CVE-2014-9094
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
7887e0a6-53bf-49c7-a7a6-7c65cec28cae
Refraction <= 1.3 - Multiple Vulnerabilities
Medium
582e2896-d800-4d73-8cef-8af76cba1ba8
DZS Video Gallery < 7.95 - Limited Local File Inclusion
Medium
CVE-2011-4955
bSuite <= 5 alpha 2 - Multiple Cross-Site Scripting
High
47938357-7d51-4d62-a08c-4b2bf3f3a062
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
High
CVE-2014-7152
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
High
CVE-2014-5324
Frontend File Manager Plugin < 3.6 - Arbitrary File Upload
High
CVE-2014-125099
I Recommend This <= 3.7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2014-6242
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
Medium
CVE-2014-7181
MaxButtons < 1.26.1 - Reflected Cross-Site Scripting
Critical
CVE-2014-10376
I Recommend This < 3.7.3 - SQL Injection
Medium
CVE-2014-3907
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
High
CVE-2014-4726
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Critical
f188c032-6f36-45a9-9ca8-39bfe91c97d4
Konzept (Unkown Versions) - Arbitrary File Upload
Critical
CVE-2014-5201
Gallery Objects <= 0.4 - SQL Injection
High
fe0fedc1-d4bd-40bf-8d8f-953db4bf2120
WP RSS Multi Importer < 3.14 - Cross-Site Request Forgery
Medium
fdbb60e5-4d67-4deb-94e0-788c1fb0e42f
WP Photo Album Plus <= 5.4.7 - Stored Cross-Site Scripting
Medium
CVE-2014-6230
WP-Ban < 1.64 - Improper Input Validation
High
CVE-2014-6312
Login Widget With Shortcode < 3.2.1 - Cross-Site Scripting
Medium
db5764f7-3e5e-4a0f-8280-c851ccb7dbc3
Ready! Google Maps <= 1.1.5 - Cross-Site Scripting
Medium
CVE-2014-5346
Disqus Comment System < 2.79 - Multiple Cross-Site Request Forgery
Medium
92b1a47e-31e2-4cfd-a24c-460ff2f00d09
Webcam 2Way Videochat <= 4.41 - Cross-Site Scripting
Critical
6d3bfb78-0538-4627-a206-8d8b5b200bc7
Custom Contact Forms <= 5.1.0.3 - Missing Authorization
Medium
CVE-2014-3903
Cakifo 1.0 - 1.6.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.