Medium
CVE-2015-0902
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
db2a2ca9-a12c-412d-80f7-66f1dc3e09af
Newsletter <= 3.8.2 - Open Redirect
Critical
CVE-2015-9272
VideoWhisper Video Presentation <= 4.1.4 - Arbitrary File Upload
Critical
CVE-2015-9271
Webcam Video Conference <= 4.91.8 - Unrestricted File Upload leading to Remote Code Execuction
Medium
abb41236-d711-41d3-a1cd-2c23467e269a
Aspose Cloud eBook Generator <= 1.0 - Directory Traversal
High
CVE-2015-0901
flashy <= 1.3 - Cross-Site Scripting
High
CVE-2015-1785
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Arbitrary File Upload
High
CVE-2015-1784
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Cross-Site Request Forgery
High
CVE-2014-9013
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 2.4.0 - Arbitrary File Download
Medium
b5635423-d17a-4f04-a164-64bf141b6bb4
IP Blacklist Cloud < 3.43 - Directory Traversal
High
CVE-2015-2292
Yoast SEO <= 1.7.3.3 - Blind SQL Injection
High
CVE-2015-2293
Yoast SEO <= 1.7.3.3 - Cross-Site Request Forgery
Medium
24c3d004-da8b-40ec-b52e-6923d4c824e8
Daily Edition <= 1.6.2 - Cross-Site Scripting
Critical
84019c69-32fd-4331-95d7-53ea1aaff616
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass
Critical
fac29bb3-e534-4bee-9974-5ccac7d445db
Daily Edition <= 1.6.2 - Arbitrary File Upload
Critical
6aeb0352-66ab-45d4-ad61-f425d7d41f45
Daily Edition <= 1.6.2 - SQL Injection
Medium
CVE-2015-10105
IP Blacklist Cloud <= 3.42 - Authenticated (Admin+) Path Traversal
Critical
CVE-2015-0894
All In One WP Security & Firewall <= 3.8.7 - SQL Injection
Low
CVE-2015-0895
All In One WP Security & Firewall <= 3.8.9 - Cross-Site Request Forgery
Critical
9d8551b8-67b9-45a8-9357-9e42fb451606
Ya'aburnee <= 1.0.7 and Dignitas <= 1.1.9 - Privilege Escalation
Medium
CVE-2015-0890
reCaptcha by BestWebSoft <= 1.12 - CAPTCHA Bypass
Critical
5c75c156-225c-465a-8d03-35a6669e9c04
Calculated Fields Form <= 1.0.11 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2015-2792
WPML < 3.1.8 - Authorization Bypass
High
CVE-2015-2673
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.