Medium
CVE-2015-10090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Unrated
297
XCloner Backup and Restore [com_cloner] - 3.5.2
High
CVE-2015-4694
Zip Attachments <= 1.5 - Directory Traversal
High
CVE-2015-4703
WordPress Renaming Tool by Vlajo <= 1.0 - Path Traversal
Unrated
307
BeestoHelpDesk - Information Disclosure
Unrated
303
"EQ Event Calendar" [com_eqfullevent] - 1.0.0 and below
Critical
f2ed5e51-8783-4b7f-9177-c116bf0fad44
Frontend File Manager <= 3.7 - Arbitrary File Upload
Critical
CVE-2015-9480
RobotCPA <= 5 - Unauthenticated Local File Inclusion
Medium
CVE-2015-5065
PayPal Currency Converter BASIC for WooCommerce <= 1.3 - Path Traversal to Arbitrary File Read
Medium
a276d70d-3ad7-49e0-a25c-8089cdd581da
AddThis <= 5.0.2 - Authenticated Stored Cross-Site Scripting
High
88b3a69d-2c94-48e6-b965-8a67b2fe42b2
WooCommerce <= 2.3.10 - PHP Object Injection
High
3bed2531-1a7d-49d9-91c9-d9e7357e5613
Erident Custom Login & Dashboard <= 3.4.1 - Cross-Site Request Forgery
Critical
CVE-2015-4455
Aviary Image Editor Add-on For Gravity Forms <= 3.0 (Beta r7) - Arbitrary File Upload
Critical
CVE-2015-4614
Easy2Map <= 1.2.4 - SQL Injection
Critical
CVE-2015-4615
Easy2Map Photos <= 1.0.9 - SQL Injection
Medium
CVE-2015-4010
Encrypted Contact Form < 1.1 - Cross-Site Scripting
Medium
CVE-2015-4617
Easy2map-photos <= 1.0.9 - Path Traversal
Medium
CVE-2015-4616
Easy2Map <= 1.2.4 - Directory Traversal
Critical
CVE-2015-9315
NewStatPress <= 1.0.0 - SQL Injection
Critical
21930a4f-2f78-42c5-8ffa-2993333db2fe
Ultimate Product Catalogue < 3.1.3 - SQL Injection
Critical
CVE-2015-4414
SE HTML5 Album Audio Player <= 1.1.0 - Directory Traversal
Critical
CVE-2015-4153
ZM Ajax Login & Register <= 1.0.9 - Local File Inclusion
Medium
69435cb6-9591-45bb-86e3-eaf1a9bc46f9
Ninja Forms Contact Form <= 2.9.18 - Cross-Site Scripting
Critical
259158f0-390a-458f-9d8e-262006c4c18d
Really Simple Guest Post <= 1.0.6 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.