Medium
CVE-2015-9230
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
86eb42de-a820-4ba7-99cb-03d068e208a9
Category and Page Icons <= 0.9.1 - Arbitrary File Upload and Deletion
High
6e327239-b4f0-4d21-b25e-f015498981cb
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - SQL Injection
Medium
CVE-2014-5187
Tom M8te <= 1.5.3 - Directory Traversal
Medium
CVE-2014-9094
DZS Video Gallery < 7.95 - Multiple Cross-Site Scripting
Critical
7887e0a6-53bf-49c7-a7a6-7c65cec28cae
Refraction <= 1.3 - Multiple Vulnerabilities
Medium
582e2896-d800-4d73-8cef-8af76cba1ba8
DZS Video Gallery < 7.95 - Limited Local File Inclusion
Medium
CVE-2011-4955
bSuite <= 5 alpha 2 - Multiple Cross-Site Scripting
High
47938357-7d51-4d62-a08c-4b2bf3f3a062
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
High
CVE-2014-7152
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
High
CVE-2014-5324
Frontend File Manager Plugin < 3.6 - Arbitrary File Upload
Unrated
224
Hika Shop
Unrated
223
JDownloads
High
CVE-2014-125099
I Recommend This <= 3.7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2014-6242
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
Medium
CVE-2014-7181
MaxButtons < 1.26.1 - Reflected Cross-Site Scripting
Critical
CVE-2014-10376
I Recommend This < 3.7.3 - SQL Injection
Unrated
290
Joomla Mac Gallery
Medium
CVE-2014-3907
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
High
CVE-2014-4726
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Critical
f188c032-6f36-45a9-9ca8-39bfe91c97d4
Konzept (Unkown Versions) - Arbitrary File Upload
Critical
CVE-2014-5201
Gallery Objects <= 0.4 - SQL Injection
Unrated
289
AceSEF - 4.1.2 and below
High
fe0fedc1-d4bd-40bf-8d8f-953db4bf2120
WP RSS Multi Importer < 3.14 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.