High
c006b85d-fc05-41e7-93b2-5a09a21bec1a
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Critical
9d0c144b-609b-4b4a-bfb2-de38b5969a9e
BP Profile Search <= 4.5.3 - PHP Object Injection
Low
a07bc541-2113-43db-acdf-9ecb00dd50e9
W3 Total Cache <= 0.9.4.1 - Security Token Bypass via Type Juggling
Critical
2b0198c8-4be8-44e0-9728-d5d2aa376796
PPOM for WooCommerce <= 1.1 - Arbitrary File Upload
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
Critical
af5a58d1-946a-451b-bc8b-a397345ae89a
Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object injection
Medium
CVE-2018-20154
WP Maintenance Mode <= 2.0.6 - Authenticated Information Disclosure
Medium
CVE-2018-20155
WP Maintenance Mode <= 2.0.6 - Missing Authorization
Medium
f80fcadd-d6b7-4d35-bced-ada3514e60fa
Store Locator Plus <= 4.5.11 - Cross-Site Scripting
High
a859505e-87ba-49f0-910b-de6141976f86
CMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection
Critical
2c5bb593-59b5-4760-8d54-14d7665c7e7f
Event Registration <= 6.02.02 - PHP Object Injection
High
8139bc38-2b78-4b02-bce8-c28dd258ee49
Adminer < 1.4.4 - Cross-Site Scripting
High
CVE-2016-0796
mb.miniAudioPlayer <= 1.7.6 - Multiple Vulnerabilities
High
CVE-2015-9269
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.1.3 - Sensitive Information Exposure
High
CVE-2015-9465
Yasr – Yet Another Stars Rating < 0.9.1 - Authenticated SQL Injection
Critical
CVE-2015-5682
Powerplay Gallery <= 3.3 - Arbitrary File Upload
High
eb32a095-7d2b-4a57-9d91-f79fb3486f9a
Copy or Move Comments < 1.0.1 - Cross-Site Scripting and SQL Injection
Critical
CVE-2015-4109
Users Ultra <= 1.5.15 - Multiple SQL Injection
High
CVE-2014-5183
Simple Retail Menus <= 4.0.1 - SQL Injection
High
CVE-2015-3904
Roomcloud < 1.3 - Cross-Site Scripting
Medium
CVE-2015-3421
eShop <= 6.3.11 - Cross-Site Scripting
Medium
CVE-2015-3439
WordPress Core < 4.1.2 - Cross-Site Scripting via Ephox in Plupload
High
CVE-2014-9013
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 2.4.0 - Arbitrary File Download
Medium
CVE-2015-2315
WPML < 3.1.9 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.