Medium
CVE-2015-9403
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2015-9404
Neuvoo Jobroll <= 2.0 - Reflected Cross-Site Scripting
Critical
CVE-2015-8351
Gwolle Guestbook <= 1.5.3 - Remote File Inclusion
Medium
CVE-2015-8350
WordPress Calls to Action < 2.5.1 - Cross-Site Scripting
Critical
CVE-2015-9341
WordPress File Upload <= 3.4.0 - Arbitrary File Upload
High
CVE-2017-14530
Crony Cronjob Manager < 0.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2015-9325
Visitors Online by BestWebSoft <= 0.3 - SQL Injection
High
CVE-2015-5308
wp-championship < 5.9 - SQL Injection
Medium
64b49f24-db48-4199-9ce2-3ea70c68d6af
Recent Posts Widget Extended <= 0.9.9.3 - Cross Site-Scripting
High
914e17ce-ab09-4e9f-9466-0ed21712cf66
Events Made Easy < 1.5.50 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2015-10100
Dynamic Widgets <= 1.5.10 - Authenticated SQL Injection
Medium
CVE-2015-9405
WP-Matomo Integration (WP-Piwik) < 1.0.5 - Cross-Site Scripting
Medium
CVE-2015-9357
Akismet <= 3.1.4 - Cross-Site Scripting
Medium
CVE-2015-7682
Pie Register – User Registration Forms < 2.0.19 - Authenticated SQL Injection
Medium
CVE-2015-7683
Font <= 7.5 - Path Traversal
Medium
CVE-2015-7377
Pie Register – User Registration Forms < 2.0.19 - Reflected Cross-Site Scripting
High
01b3013f-60b9-449b-a2a9-64e37a1454ef
JM Twitter Cards < 6.2 - Full Path Disclosure
High
CVE-2015-10140
WordPress Infinite Scroll – Ajax Load More <= 2.8.1.1 - Arbitrary File Upload
Critical
CVE-2015-9335
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms < 1.1.1 - SQL Injection
Critical
CVE-2015-7670
Support Ticket System < 1.2.1 - SQL Injection
High
CVE-2015-9470
History Collection <=1.1.1 - Arbitrary File Download
Medium
CVE-2015-7668
Easy2Map <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2015-7357
uDesign Theme 2.3.0 - 2.7.9 - Unauthenticated DOM Cross-Site Scripting
Critical
CVE-2015-7669
Easy2Map <= 1.2.9 - Directory Traversal and Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.