Medium
5176d862-577b-4a37-9da3-9ba106f77d6e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
01d19333-d315-4715-8365-719260ae0ee4
Email Subscribers & Newsletters < 2.9.1 - Cross-Site Scripting
High
71d63f0d-ce01-489e-bcc4-7632f1a4bb04
MainWP Dashboard and MainWP Child <= 2.0.22 - Unspecified Vulnerability
Medium
ee74d229-499e-4f9a-ad7d-c707f6eeac6e
Ninja Forms Contact Form <= 2.9.21 - Reflected Cross-Site Scripting
Medium
CVE-2015-2321
Job Manager - < 0.7.23 - Stored Cross-Site Scripting
Medium
CVE-2015-9429
YITH Maintenance Mode <= 1.1.4 - Reflected Cross-Site Scripting
High
b7fe772a-542e-4c3e-b1cb-05cce3b2ec3f
wordpress vertical image slider plugin < 1.2 - Cross-Site Request Forgery
Critical
743d7370-cf33-481c-8d0a-c6f969e38b42
Email Before Download <= 3.4 - SQL Injection
Medium
CVE-2015-5532
Paid Memberships Pro < 1.8.4.3 - Multiple Cross-Site Scripting
High
CVE-2015-9269
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.1.3 - Sensitive Information Exposure
Critical
CVE-2015-9451
Plugmatter Optin Feature Box < 2.0.14 - SQL Injection
Critical
CVE-2015-9452
NEX-Forms – Ultimate Form Builder < 4.6.1 - SQL Injection
High
CVE-2015-10133
Subscribe to Comments <= 2.1.2 - Local File Includion
High
CVE-2015-20067
WP Attachment Export < 0.2.4 - Arbitrary File Download
High
CVE-2015-1000006
Recent Backups <= 0.7 - Directory Traversal
High
CVE-2015-1000005
Candidate Application Form <= 1.3 - Arbitrary File Download
High
d49bd587-26fc-48fb-86aa-a043a5938d43
CP Image Store with Slideshow < 1.0.7 - Arbitrary File Download
Critical
CVE-2016-1000156
MailCWP <= 1.100 - Arbitrary File Upload
High
24c78d62-c2d0-4699-bd80-e8deef301eb3
CP Image Store with Slideshow < 1.0.6 - Arbitrary File Download
Critical
CVE-2015-1000000
MailCWP <= 1.100 - Arbitrary File Upload
Critical
CVE-2015-9334
Email Newsletter <= 20.15 - Unauthenticated SQL Injection
Critical
CVE-2015-9480
RobotCPA <= 5 - Unauthenticated Local File Inclusion
High
88b3a69d-2c94-48e6-b965-8a67b2fe42b2
WooCommerce <= 2.3.10 - PHP Object Injection
Medium
69435cb6-9591-45bb-86e3-eaf1a9bc46f9
Ninja Forms Contact Form <= 2.9.18 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.