Medium
7dc9973a-4b5f-4efb-8df5-df1cbf9fe3b0
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
7a46c049-367d-4a67-9607-c74ef0b96c71
Ultimate CSV Importer < 3.6.75 - Information Disclosure
Medium
CVE-2015-1581
Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Critical
CVE-2015-10143
Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Update
Medium
ea607a56-ed6e-44dd-be42-a0b0d970742e
Store Locator Plus < 4.2.27 - Email Injection
High
CVE-2014-8802
Pie Register <= 2.0.13 - Missing Authorization
High
CVE-2015-10136
GI-Media Library < 3.0 - Directory Traversal
Critical
8b783b94-7135-49c1-aff2-1c2ea24bbfcd
CIP4 Folder Download Widget < 1.11 - Local File Inclusion
High
CVE-2015-0920
Banner Effect Header <= 1.2.7 - Cross-Site Request Forgery
Medium
a46364f4-9258-4f5e-9d53-dcbaf726f2f0
WP RSS Aggregator – News Feeds, Autoblogging, Youtube Video Feeds and More <= 4.6.3 - Authorization Bypass
Medium
CVE-2014-9335
DandyID Services <= 1.5.9 - Cross-Site Request Forgery
Medium
d118beb2-bcb1-4d35-b25e-172fa4b6d916
WP-FB-AutoConnect <= 4.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
d5c0c64c-7105-4bc3-b42d-89cfa44d02b9
ChurcHope <= 2.1 - Local File Inclusion
Medium
CVE-2014-9283
BestWebSoft Captcha <= 4.0.6 - CAPTCHA Bypass
Medium
CVE-2014-125130
Google MP3 Player <= 1.0.11 - Unauthenticated Arbitrary File Read
Critical
9e7a1116-2bf1-4d36-a091-e0d4a9d6e1c9
InfiniteWP Client <= 1.3.7 - Privilege Escalation
Medium
CVE-2014-9688
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.8 - Reflected Cross-Site Scripting
Medium
CVE-2014-8809
WP Symposium <= 14.10 - Cross-Site Scripting
Critical
CVE-2014-8810
WP Symposium < 14.11 - Authenticated SQL Injection
Critical
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
High
a0850b88-09f0-4da8-a9be-1b4aacf610e0
Contact Form Email < 1.0.1 - Cross-Site Scripting
High
CVE-2015-2220
Ninja Forms Contact Form <= 2.8.8 - Stored Cross-Site Scripting
High
CVE-2014-9039
WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset
Critical
CVE-2014-9178
SP Project & Document Manager < 2.4.4 - Multiple SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.