Low
CVE-2015-0895
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
9d8551b8-67b9-45a8-9357-9e42fb451606
Ya'aburnee <= 1.0.7 and Dignitas <= 1.1.9 - Privilege Escalation
Medium
691c0f3b-b723-4310-b4df-ed3e1db9d548
WP Plugin Info Card < 2.3.7 - Cross-Site Scripting
Medium
CVE-2015-1874
Contact Form DB <= 2.8.29 - Cross-site request forgery via a request in the CF7DBPluginSubmissions page to wp-admin/admin.php
Critical
CVE-2015-10087
DesignFolio Plus Theme (Unkown Versions) - Arbitrary File Upload
Medium
CVE-2015-0890
reCaptcha by BestWebSoft <= 1.12 - CAPTCHA Bypass
Critical
5c75c156-225c-465a-8d03-35a6669e9c04
Calculated Fields Form <= 1.0.11 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2015-2792
WPML < 3.1.8 - Authorization Bypass
Critical
a6bf60cc-4a07-4d5d-bff3-20d0115a5bd3
Gravityforms <= 1.8.19 - Arbitrary File Upload
Medium
CVE-2015-9329
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
High
CVE-2015-2673
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Critical
37c22521-68ef-4d15-9633-8fe1af493a52
IP Blacklist Cloud < 3.41 - SQL Injections
Medium
CVE-2015-2195
WP Media Cleaner <= 2.2.6 - Cross-Site Scripting
High
e2c11005-dcb3-40b3-863a-0612132acb08
Slimstat Analytics < 3.9.6 - Unauthenticated Blind SQL Injection
Medium
7dc9973a-4b5f-4efb-8df5-df1cbf9fe3b0
EZ Portfolio (Unmaintained) < 1.0.2 - Cross-Site Scripting
Medium
CVE-2015-2040
Contact Form DB <= 2.8.26 - Authenticated Cross-Site Scripting
High
7a46c049-367d-4a67-9607-c74ef0b96c71
Ultimate CSV Importer < 3.6.75 - Information Disclosure
Medium
7c6ea33f-ee43-4df8-9633-60303b68b859
AdPlugg WordPress Ad Plugin < 1.1.34 - Cross-Site Scripting
High
13e7c4ab-7856-41a5-8cd9-4f8118af534d
Gallery Bank – WordPress Photo Gallery <= 3.0.101 - SQL Injection
High
CVE-2015-2084
Easy Social Icons <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2014-9262
Duplicator < 0.5.10 - Arbitrary Backup Creation and Download
High
CVE-2015-2218
WonderPlugin Audio Player < 2.1 - Multiple Cross-Site Scripting
High
CVE-2015-2199
WonderPlugin Audio Player <= 2.0 - Blind SQL Injection
High
CVE-2015-0260
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.