Medium
455d7ee8-9a5a-41f6-b0ae-c55f04b41e52
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2015-9406
mTheme-Unus < 2.3 - Directory Traversal to Unauthenticated Arbitrary File Read
High
39b6a1c7-2f8a-49e9-8807-a53a25524018
Ninja Forms Contact Form <= 2.9.27 - CSV Injection
Critical
741915a7-c88d-41e1-9347-1d5d6494d051
mTheme-Unus (All Versions) - Local File Inclusion
Medium
13981037-e698-42a7-9471-e27486cf1a4e
WP Super Cache <= 1.4.4 - Directory Listing
Medium
966b43ea-dbd3-4f1e-b803-08027fff6f8f
wordpress vertical image slider plugin < 1.2 - Cross-Site Scripting
High
CVE-2015-9409
ALO EasyMail Newsletter <= 2.6.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2015-1000012
MyPixs <= 0.3 - Local File Inclusion
Medium
CVE-2015-7989
WordPress Core < 4.3.1 - Authenticated Cross-Site Scripting
High
115f966d-b0f4-46c0-af05-48dd5bf72098
WP Shop <= 3.4.3.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2015-9473
estrutura-basica (All Known Versions) - Path Traversal
Medium
CVE-2015-9411
Replyable – Subscribe to Comments and Reply by Email < 1.4.6 - Cross-Site Scripting
Medium
a5a34838-fdc5-4954-9576-abf81cbaac2e
MainWP Child <= 2.0.27 - Multiple Cross-Site Scripting
Critical
CVE-2014-10384
Memphis Documents Library <= 2.6.16 - Local File Inclusion
Medium
CVE-2015-9537
NextGen Gallery <= 2.1.9 - Cross-Site Scripting
High
CVE-2015-10144
Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2015-9419
Captain Slider <= 1.0.6 - Stored Cross-Site Scripting
Medium
50589b41-cc2b-4ffa-ab63-509fb9d61be2
NextGen Gallery <= 2.1.7 - Path Traversal
Medium
CVE-2015-9427
Googmonify <= 0.5.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2015-9428
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages < 1.1 - Cross-Site Scripting
Medium
696d5fe3-1344-461b-a26f-e5099a836c33
WP Job Manager < 1.23.8 - Multiple Cross-Site Scripting
Medium
CVE-2015-9293
All In One WP Security & Firewall <= 3.9.7 - Cross-Site Scripting
Medium
427c29e6-9bbe-4094-a2a2-46945525f5b3
Ad Inserter <= 1.5.5 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
52ac7e85-0a01-41f0-b753-7858a859705f
Email Encoder < 1.4.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.