High
CVE-2015-0901
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
6c439914-1d5a-4607-8e5c-9279fa3b462c
Ajax Search Lite < 3.11 - Missing Authorization to Remote Code Execution
High
CVE-2015-1785
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Arbitrary File Upload
High
CVE-2015-1784
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Cross-Site Request Forgery
Medium
135213d6-8058-4573-a97d-a95b0708d807
Ptengine – Heatmap Analytics < 1.0.2 - Reflected Cross-Site Scripting
Critical
3ccd7300-f22a-405a-8087-9c750cb187a5
InBoundio Marketing < 2.0.1 - Arbitrary File Upload
High
CVE-2015-2755
AB Google Map Travel (AB-MAP) < 4.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2014-9014
Marketplace <= 2.4.0 - Path Traversal
High
CVE-2014-9013
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 2.4.0 - Arbitrary File Download
High
a53a1178-7267-4d7f-ad9e-2906c05b8fe0
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Stored Cross-Site Scripting
High
95cd2bae-4ab7-4a0c-bb71-c17b119eaaa9
All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export
High
2ae0d83b-a444-4141-89da-b63ce216db17
Ajax Search Pro <= 3.5 - Cross-Site Request Forgery
Medium
1053ff60-469f-4940-a865-35ed28fc769a
Easy Coming Soon <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2015-2260
Gravityforms <= 1.9.3.5 - SQL Injection
Critical
e95b2bfe-8675-4932-9b37-73ad15fa228e
Pods – Custom Content Types and Fields < 2.5.1.2 - SQL Injection
Critical
d4994d7d-82f7-4cb0-869f-e27abe04b621
Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection
Critical
CVE-2015-4133
ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Upload
Critical
CVE-2015-10138
Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload
Medium
CVE-2015-2324
Photo Gallery by 10Web <= 1.2.12 - Authenticated Cross-Site Scripting
Medium
b5635423-d17a-4f04-a164-64bf141b6bb4
IP Blacklist Cloud < 3.43 - Directory Traversal
High
CVE-2015-2329
WooCommerce <= 2.3.5 - Stored Cross-Site Scripting
High
CVE-2015-2062
Responsive Slider – Image Slider – Slideshow for WordPress < 2.7.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2015-9330
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection
Medium
22a0f10f-0a67-4f4a-99db-a625bec20bdc
Image Gallery - Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via thumbtext
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.