High
616c65e7-8d0c-4be8-bd6f-f98187ff1539
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
47b75e7f-87d3-40d5-b3c4-998d3164d48a
SP Project & Document Manager <= 2.5.9.5 - Cross-Site Request Forgery
Medium
14667d93-4fba-4c50-8228-737ae91f2789
MailPoet Newsletters <= 2.6.19 - Reflected Cross-Site Scripting
Medium
CVE-2016-2222
WordPress Core < 4.4.2 - Server-Side Request Forgery
Medium
e0365efc-f443-40a6-a365-fd36c1818242
User Meta Manager < 3.4.8 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2016-0770
Connections Business Directory < 8.5.9 - Cross-Site Scripting
Medium
6d93ce6c-0139-472c-a5ec-21fdf33cd898
Titan Anti-spam & Security <= 4.1 - Cross-Site Scripting
Medium
CVE-2016-11012
Sola Support Tickets < 3.13 - Cross-Site Scripting
Medium
7b19b0b2-d6cb-4d92-9925-c77d517ddfb7
rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting
Critical
4d79df74-bb28-412b-bba1-9f8a40ae981d
Appointment Booking Calendar <= 1.2.24 - SQL Injection
Medium
CVE-2016-11013
IMPress Listings <= 2.0.1 - Reflected Cross-Site Scripting
High
CVE-2014-9309
Formidable Form Builder <= 1.07.11 - SQL Injection
Medium
436d77d9-242a-452b-93d4-707881f59034
WP Easy Gallery <= 4.1.4 - Stored Cross-Site Scripting
High
13c9a71f-ec0a-4d4a-be08-787aa22a0fae
Appointment Booking Calendar <= 1.2.24 - Cross-Site Scripting
Critical
CVE-2016-10916
Appointment Booking Calendar <= 1.1.23 - SQL Injection
High
CVE-2016-10928
OneLogin SAML SSO < 2.2.0 - Authentication Bypass
Critical
f5ad74c5-93ba-414c-98ad-0987547f172f
Simple Download Monitor <= 3.2.8 - Missing Authorization
Critical
d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0
Download Manager <= 2.8.7 - Missing Authorization
Medium
c59cddfb-c434-4a69-9c1c-7d58f022c1aa
Download Manager <= 2.8.7 - Privilege Escalation
Medium
639bf20c-04d4-49e5-8da1-685421a6f63a
Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing
Medium
CVE-2016-1564
WordPress Core < 4.4.1 - Cross-Site Scripting via Theme Names
Medium
CVE-2016-10996
Popup Builder by OptinMonster <= 1.1.4.5 - Remote Code Execution
Medium
c55e1d38-081c-4ef6-aad7-04ef52c6bee0
Commentator < 2.5.3 - Reflected Cross-Site Scripting
High
c7296fdb-d5d6-4d4f-ac80-b9d5452191b4
WP Symposium Pro < 16.01 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.