Medium
2fe34989-493c-4883-a1ca-454262919202
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2015-9532
Easy Digital Downloads (EDD) Digital Store < 1.3.3 - Cross-Site Scripting
Medium
CVE-2015-9520
Easy Digital Downloads – Per Product Emails < 1.0.9 - Cross-Site Scripting
High
26e7c3fa-7ae7-4343-8494-2955cb755c6d
WPtouch <= 3.7.5.3 - Cross-Site Scripting
Critical
CVE-2015-3314
Tune Library < 1.5.5 - SQL Injection
Medium
CVE-2015-9368
Easy EU Value Added (VAT) Taxes < 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2015-9294
All In One WP Security & Firewall <= 3.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2015-9373
PayPal Pro Add-on for iThemes Exchange < 1.1.0 - Cross-Site Scripting
Medium
CVE-2015-9536
Easy Digital Downloads (EDD) Twenty-Twelve < 1.1.1 - Cross-Site Scripting
Medium
CVE-2015-9515
Easy Digital Downloads – htaccess Editor < 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-9377
iThemes Builder Depot Theme < 5.0.30 - Reflected Cross-Site Scripting
Medium
CVE-2015-9523
Easy Digital Downloads – Recommended Products <= 1.2.3.2 - Cross-Site Scripting
Medium
03ddef11-04cb-4639-afb0-f123b339b9ae
All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-9527
Easy Digital Downloads – Simple Shipping <= 2.1.3 - Cross-Site Scripting
Unrated
299
RD Download - 0.9.0 and below
Unrated
294
Kunena - 3.0.7 and previous
Medium
CVE-2015-10110
TinyChat Room Spy <= 1.2.8 - Reflected Cross-Site Scripting
High
CVE-2015-1852
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
High
784e3b21-08f5-4cbc-b726-fe60e1faefea
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.4.95 - SQL Injection
High
bfe10de1-1c1f-437b-8851-7024fce753be
WP-Mon <= 0.5.1 - Arbitrary File Download
High
a7c32efa-1872-4302-a947-dc0005080e55
Citizen Space <= 1.1 - Reflected Cross-Site Scripting
Medium
87ca4c05-b9fc-4932-be4b-beb57ca3bb7e
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
Critical
6b456815-ffdf-41fb-b4a8-0f22fd059d34
AJAX Store Locator <= 1.2 - SQL Injection
Medium
f7cb3540-ffdb-4b4c-a518-4ca8232ab53f
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.