High
914e17ce-ab09-4e9f-9466-0ed21712cf66
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2015-10100
Dynamic Widgets <= 1.5.10 - Authenticated SQL Injection
Medium
CVE-2015-9405
WP-Matomo Integration (WP-Piwik) < 1.0.5 - Cross-Site Scripting
Medium
CVE-2015-9357
Akismet <= 3.1.4 - Cross-Site Scripting
Medium
CVE-2015-7682
Pie Register – User Registration Forms < 2.0.19 - Authenticated SQL Injection
Medium
CVE-2015-7683
Font <= 7.5 - Path Traversal
Medium
CVE-2015-7377
Pie Register – User Registration Forms < 2.0.19 - Reflected Cross-Site Scripting
High
01b3013f-60b9-449b-a2a9-64e37a1454ef
JM Twitter Cards < 6.2 - Full Path Disclosure
High
CVE-2015-10140
WordPress Infinite Scroll – Ajax Load More <= 2.8.1.1 - Arbitrary File Upload
Critical
CVE-2015-9335
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms < 1.1.1 - SQL Injection
Unrated
357
Komento - XSS (Cross Site Scripting)
Critical
CVE-2015-7670
Support Ticket System < 1.2.1 - SQL Injection
High
CVE-2015-9470
History Collection <=1.1.1 - Arbitrary File Download
Medium
CVE-2015-7668
Easy2Map <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2015-7357
uDesign Theme 2.3.0 - 2.7.9 - Unauthenticated DOM Cross-Site Scripting
Critical
CVE-2015-7669
Easy2Map <= 1.2.9 - Directory Traversal and Local File Inclusion
Medium
CVE-2015-7667
ResAds < 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2015-7666
Payment Form for PayPal Pro < 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2015-9385
Quotes and Tips by BestWebSoft < 1.20 - Cross-Site Scripting
Medium
455d7ee8-9a5a-41f6-b0ae-c55f04b41e52
AdPush <= 1.29 - Reflected Cross-Site Scripting
Medium
CVE-2015-9384
Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
a1c731b9-8862-4140-b5e8-58132113e22c
Jetpack <= 3.7.1 - Stored Cross-Site Scripting
Medium
72094f97-c1cc-48df-9c88-1352e6d6e67e
Jetpack <= 3.7.1 - Information disclosure
High
CVE-2015-9406
mTheme-Unus < 2.3 - Directory Traversal to Unauthenticated Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.