High
ecd68933-e808-4816-b9d2-7491194f2347
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2016-15040
Kento Post View Counter <= 2.8 - SQL Injection
Critical
af90aef0-fd96-43ff-8400-09bd5cebed28
WP-EMail < 2.67.2 - SQL Injection
Critical
952e299a-5cec-444b-8359-3e7d8dec3ccb
Event Registration <= 6.02.02 - SQL Injection
Medium
a7701dd2-8452-4529-a931-db2553ca1ae5
Yoast SEO <= 3.2.4 - Sensitive Data Exposure
High
40e09aec-48af-4bf9-9254-b34bad7008c3
Easy Photo Album <= 1.1.5 - Sensitive Information Disclosure
Critical
d8da513f-19b1-4ec4-b3ad-dc3a7bb6ab49
SP Projects & Document Manager <= 2.5.9.5 - SQL Injection
Medium
9b86a259-b102-411a-8d4c-c131737b90d8
Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Sensitive Information Disclosure
Medium
CVE-2016-1000136
Heat Trackr < 1.01 - Reflected Cross-Site Scripting
High
CVE-2016-20068
Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection
Critical
CVE-2016-10909
Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection
Medium
e0365efc-f443-40a6-a365-fd36c1818242
User Meta Manager < 3.4.8 - Missing Authorization to Sensitive Information Disclosure
Critical
4d79df74-bb28-412b-bba1-9f8a40ae981d
Appointment Booking Calendar <= 1.2.24 - SQL Injection
High
CVE-2014-9309
Formidable Form Builder <= 1.07.11 - SQL Injection
Medium
c59cddfb-c434-4a69-9c1c-7d58f022c1aa
Download Manager <= 2.8.7 - Privilege Escalation
Critical
806e5056-5c29-49d0-9150-add6ee485758
Simple Ads Manager <= 2.9.4.116 - SQL Injection
High
da025593-ad11-4a48-97e1-d31c6f0e62ea
Breezing Forms <= 1.2.7.30 - SQL Injection
High
6ef8bf27-3b20-4d90-8d29-b9713d2c41d6
Contact Form Maker <= 1.7.30 - Authenticated (Admin+) SQL Injection
Critical
46b3f3fb-5bd5-4af4-a281-647ad0b8e992
Google Map <= 2.2.5 - SQL Injection
High
CVE-2015-10111
Watu Quiz <= 2.6.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2016-10979
Tag Miner (Automatic Tag Extraction) < 1.1.5 - Cross-Site Scripting
High
CVE-2016-10978
Tag Miner (Automatic Tag Extraction) < 1.1.5 - Cross-Site Request Forgery
Critical
CVE-2015-9325
Visitors Online by BestWebSoft <= 0.3 - SQL Injection
High
CVE-2015-10100
Dynamic Widgets <= 1.5.10 - Authenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.