Unrated
CVE-2015-1613
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2015-10127
PlusCaptcha <= 2.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2015-1614
Image Metadata Cruncher < 1.8 - Reflected Cross Site Scripting
Unrated
273
Gallery WD version
Critical
CVE-2015-2196
SpiderCalendar <= 1.4.9 - Unauthenticated SQL Injection
High
CVE-2015-2194
Fusion <= 3.1 - Arbitrary File Upload
High
CVE-2014-9312
Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload
Critical
CVE-2015-2065
Wordpress Video Gallery <= 2.7 - SQL Injection
High
CVE-2014-6412
WordPress Core < 4.4 - Brute Force Password Recovery Tokens
Critical
CVE-2015-10099
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection
Medium
CVE-2015-1581
Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Medium
CVE-2015-9332
WordPress Uninstall <= 1.2.1 - Cross-Site Request Forgery to Site Reset
Medium
CVE-2015-1436
Easing Slider <= 2.2.0.6 - Cross-Site Scripting
Critical
fa2bc3ae-1162-496b-8bc3-5bee1c0ff702
Cherry Plugin < 1.2.7 - Arbitrary File Upload
High
b94facce-975f-4080-ad67-95d282b28d0d
WPBakery Page Builder for WordPress (formerly Visual Composer) <= 4.7.3 - Multiple Cross-Site Scripting Issues
High
e92cc6a3-062c-4f0e-9539-07d0fa0e9404
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.4.36 - SQL Injection
Critical
6bf743b1-5a59-4e22-8c59-3c17b2646ec8
Store Locator < 3.34 - SQL Injection
High
CVE-2015-1580
Redirection Page <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2015-2089
CrossSlide jQuery Plugin <= 2.0.5 - Multiple Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2015-10139
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
High
f795a46c-ba0c-45d5-9ff7-638752f1681b
User Meta Manager < 3.4.7 - Authenticated Blind SQL Injection
Medium
CVE-2015-1494
FancyBox for WordPress <= 3.0.2 - Stored Cross-Site Scripting
Critical
c75bfba9-b25a-4966-835c-8d22736de809
UpdraftPlus WordPress Backup Plugin <= 1.9.50 - Nonce Leak to Authorization Bypass
Medium
CVE-2015-10094
Fastly <= 0.97 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.