High
0747b104-5be6-44eb-b62c-0026f810573c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
cc046b72-692a-4980-90ad-26c8fc2a131a
Ultimate Member <= 1.3.64 - Local File Inclusion
High
4ebbe9a4-3769-4e05-9377-907b43e3fe10
WP-EMail <= 2.67.2 - Unauthenticated Cross-Site Scripting
High
2caed42f-fb5b-488a-af15-f5ad3d82a68c
Profile Builder <= 2.4.0 - Privilege Escalation
Medium
CVE-2018-20154
WP Maintenance Mode <= 2.0.6 - Authenticated Information Disclosure
Critical
bf88e79b-262e-4fee-9cef-85d96d300972
BePro Listings <= 2.2.0020 - Unauthenticated Arbitrary File Upload
Medium
CVE-2018-20155
WP Maintenance Mode <= 2.0.6 - Missing Authorization
Medium
CVE-2016-10967
Real3D Flipbook <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2016-10929
Advanced AJAX Page Loader < 2.7.7 - Arbitrary File Upload
High
CVE-2016-10966
Real3D Flipbook <= 1.0.0 - File Upload to User Controlled Location
Medium
75f964a8-a5eb-4990-a6d4-e911a20d0035
Real3D Flipbook <= 2.8 - Reflected Cross-Site Scripting via bookId parameter
Critical
CVE-2016-10965
Real3D Flipbook <= 1.0.0 - Directory Traversal
Medium
dc24d2de-352c-4215-a4db-2966aa6467c7
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads
High
9cfbafce-ba3b-477f-ad8d-ca4e57332f0b
WangGuard < 1.7.2 - Reflected Cross-Site Scripting
Critical
82802e80-efb5-4aa3-9fea-9c21bfb71efa
Real3D Flipbook <= 2.8 - Unauthenticated Arbitrary File or Directory Delete
Medium
f80fcadd-d6b7-4d35-bced-ada3514e60fa
Store Locator Plus <= 4.5.11 - Cross-Site Scripting
Medium
CVE-2016-10961
ColorWay <= 3.4.1 - Cross-Site Scripting
High
8a613e56-54c0-4bf5-b87f-0e4e507c1337
FormBuilder < 1.08 - SQL Injection
Medium
8910d60c-45be-41a1-86fb-a0d60a78e660
WordPress Landing Pages <= 2.2.4 - Cross-Site Scripting
High
4f018e22-bf07-4371-afc1-3e664ea1c5a3
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 2.3.6 - Stored Cross-Site Scripting
Medium
86167b8c-6d4e-495d-96f7-8cda8e2c80b8
Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion
Medium
CVE-2016-10970
SupportFlow <= 0.6 - Cross-Site Scripting via a ticket excerpt.
Critical
CVE-2016-10971
MemberSonic Lite Membership Site Plugin <= 1.2 - Authentication Bypass
High
6173d307-9917-4d76-b6bf-d5646b9e33d6
WP Activity Log 1.5 - 2.4.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.