Medium
CVE-2014-10385
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
416ab7d5-9f3b-4ccc-9a0f-bfe5d38b6f97
KenBurner Slider (All Versions) - Path Traversal
High
CVE-2014-6059
Advanced Access Manager <= 2.8.2 - Arbitrary File Overwrite
Medium
CVE-2014-125110
WordPress File Upload <= 2.4.3 - Reflected Cross-Site Scripting
High
CVE-2014-5368
WP Source Control < 3.1.1 - Directory Traversal
Medium
CVE-2014-5196
Improved User Search in Backend <= 1.2.5 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2014-5347
Disqus Comment System < 2.76 - Cross-Site Request Forgery
High
CVE-2014-8375
GB Gallery Slideshow <= 1.5 - SQL Injection
Medium
CVE-2014-5344
MobiLoud – WordPress Mobile Apps – Convert your WordPress Website to Native Mobile Apps < 2.3.8 - Cross-Site Scripting
Medium
CVE-2014-125100
Job Board by BestWebSoft <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2014-5199
WordPress File Upload < 2.4.2 - Cross-Site Request Forgery
High
CVE-2014-5190
SI CAPTCHA Anti-Spam < 2.7.6 - Reflected Cross-Site Scripting
High
CVE-2014-125095
Contact Form Plugin <= 3.81 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2018-17074
Feed Statistics < 4.0 - Open Redirect
Medium
CVE-2014-125103
BestWebSoft's Twitter <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
05d86f94-1a1c-42d6-b0db-e19c5cbd1766
PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin < 1.7.5 - Cross-Site Scripting
High
CVE-2014-9033
WordPress Core < 4.0.1 - Cross-Site Request Forgery to Authentication Takeover
Medium
CVE-2014-5266
WordPress Core < 3.9.2 - Denial of Service via XML #2
Medium
CVE-2014-5205
WordPress Core < 3.9.2 - Brute Force of Cross-Site Request Forgery Tokens
Critical
CVE-2014-8363
WordPress Spreadsheet <= 0.62 - SQL Injection
High
CVE-2014-5203
WordPress Core < 3.9.2 - Deserialization via Widgets
Medium
CVE-2014-8364
WordPress Spreadsheet (wpSS) <= 0.62 - Cross-Site Scripting
Low
CVE-2014-5240
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
Low
CVE-2014-5265
WordPress Core < 3.9.2 - Denial of Service via XML
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.