High
b0907cb0-b101-4c88-9a8b-b35133e1d0a2
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2014-4518
Contact Form by ContactMe.com <= 2.3 - Cross-Site Scripting
High
CVE-2015-9337
Profile Builder <= 2.1.3 - Missing Access Controls
High
1ab0d9f3-0185-41f1-bab5-f47f828fa79c
MiwoFTP < 1.0.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Unrated
285
ECommerce-WD [com_ecommercewd] - maybe earlier
Unrated
287
Creative Contact Form [com_creativecontactform] - 2.0.0 and previous
Medium
e6de7a25-3079-4023-9faa-7a63952afe25
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Medium
c6168ee5-5df3-4d79-96bb-95029f2ac54b
iThemes Security <= 4.6.12 - Stored Cross-Site Scripting
Medium
CVE-2015-3325
WP Symposium < 15.4 - SQL Injection
High
2db8e79f-e70b-421f-8120-7aa65e704deb
MiwoFTP < 1.0.5 - Arbitrary File Download
Unrated
292
Spider Form Maker by Web-Dorado [com_formmaker] - 3.4 and lower
Unrated
298
Face Gallery by Apptha [com_facegallery] version
Medium
CVE-2015-9493
My Wish List < 1.4.2 - Cross-Site Scripting
Critical
c96507cf-3c2d-4516-92f5-d08384aa6b1a
WORDPRESS VIDEO GALLERY <= 2.8 - SQL Injection
Unrated
296
Joomla Simple Photo Gallery version
Unrated
279
AllVideos version
Critical
CVE-2015-10137
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
Critical
CVE-2015-9333
cformsII < 14.6.10 - SQL Injection
Medium
c342fe87-59f3-43e9-8694-cc2551650a91
Fusion Engage <= 1.0.5 - Local File Inclusion
High
3762cd92-604a-4dac-a09e-6b4a08c4d804
Duplicator <= 0.5.14 - SQL Injection
High
5aeca3b6-6b1b-40b5-8824-de4a90c7ddc3
Gantry 4 Framework <= 4.1.3 - Remote Code Execution
High
3ba84be8-c6dc-4cb7-b93c-38c69ab07154
WP REST API (WP API) < 1.2.1 - Sensitive Information Disclosure
Critical
1e37e54b-9c00-4d04-9c81-791242d45d6c
iDump iPhone to WordPress Photo Uploader <= 1.8 - Arbitrary File Upload
Critical
CVE-2015-9530
Easy Digital Downloads – Upload File <= 1.0.4 - Arbitrary File Upload/Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.