Medium
fdbb60e5-4d67-4deb-94e0-788c1fb0e42f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2014-6230
WP-Ban < 1.64 - Improper Input Validation
High
CVE-2014-6312
Login Widget With Shortcode < 3.2.1 - Cross-Site Scripting
Medium
db5764f7-3e5e-4a0f-8280-c851ccb7dbc3
Ready! Google Maps <= 1.1.5 - Cross-Site Scripting
Medium
CVE-2014-5346
Disqus Comment System < 2.79 - Multiple Cross-Site Request Forgery
Medium
92b1a47e-31e2-4cfd-a24c-460ff2f00d09
Webcam 2Way Videochat <= 4.41 - Cross-Site Scripting
Critical
6d3bfb78-0538-4627-a206-8d8b5b200bc7
Custom Contact Forms <= 5.1.0.3 - Missing Authorization
Medium
CVE-2014-3903
Cakifo 1.0 - 1.6.1 - Cross-Site Scripting
Critical
2ddfb494-1a63-4958-849e-392eec09615d
Formcraft (Unknown Versions) - Arbitrary File Deletion
Medium
1aadb04c-a483-4f9b-8246-3dd7e158fcc2
Ready! Ecommerce Shopping Cart < 0.5.1 - Cross-Site Request Forgery and Cross-Site Scripting
Medium
0324852f-9e19-467c-9b0b-4c9fe2dd1cc0
WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting
Unrated
288
EuropaCart
High
CVE-2014-6313
WooCommerce <= 2.2.2 - Cross-Site Scripting via range Parameter
High
fdfa2336-dda2-4945-9278-1a85f8b5f88b
Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI
Medium
be700f83-248f-4d22-b53d-7cc61e1f7d7d
Wordfence <= 5.2.3 - Multiple Protection Mechanism Bypasses
Unrated
222
Spider Contacts
Medium
CVE-2014-10388
Support Plus Responsive Ticket System <= 4.1 - Full Path Disclosure
Critical
CVE-2014-10387
Support Plus Responsive Ticket System <= 4.1 - SQL Injection
High
f315fff8-d616-4a5c-91bc-d8b0ec0f028f
Wordfence <= 5.2.2 - Stored Cross-Site Scripting
Medium
cb427792-8675-4c38-a4e6-ba2b8091003f
TinyMCE Advanced <= 4.1.9 - Cross-Site Request Forgery
Medium
9f70f3d2-c267-4802-9a54-4f64c4507dba
Urban City (All Versions) - Arbitrary File Download
High
84227fd2-c322-45e3-82cd-70e1d870eceb
W3 Total Cache <= 0.9.4 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
High
CVE-2014-10397
Antioch <= 1.3 - Arbitrary File Download
Critical
CVE-2014-10396
Epic Church by Organized Themes <= 3.6 - Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.