Critical
07067eb5-d15e-4342-914f-5e2a08ea8bb4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2015-9334
Email Newsletter <= 20.15 - Unauthenticated SQL Injection
High
eb32a095-7d2b-4a57-9d91-f79fb3486f9a
Copy or Move Comments < 1.0.1 - Cross-Site Scripting and SQL Injection
Critical
CVE-2015-9315
NewStatPress <= 1.0.0 - SQL Injection
Critical
21930a4f-2f78-42c5-8ffa-2993333db2fe
Ultimate Product Catalogue < 3.1.3 - SQL Injection
Critical
a6213e09-8a97-44cf-85ef-83179d79206c
LeagueManager < 4.0.5 - SQL Injection
Medium
5ec6211b-783b-4375-972b-adcaf9f9f526
Easy Author Image <= 1.5 - Email Information Exposure
High
79289ad7-f289-4472-973d-d0ec2996c5c5
Visual Form Builder <= 2.8.2 - Authenticated SQL Injection
Critical
5b53fa6f-7fb8-4643-a365-7630102e7e46
BigContact Contact Page < 1.4.7 - Authenticated SQL Injection
Critical
3d7b4428-99ac-4f84-8595-941124121eb2
WP Forum <= 2.4 - SQL Injection
High
373e9a7c-cdc3-43cb-9c8f-2be25f514b61
Visual Form Builder <= 2.8.2 - Cross-Site Request Forgery to SQL Injection
High
0fa4585d-9ffa-4a32-aeb7-60cdad63187b
WP Backup+ (Unknown Versions) - Sensitive Information Disclosure
Critical
bd9e5654-387e-4fc3-a6eb-2eface298a9c
Amazon Product in a Post Plugin < 3.5.3 - SQL Injection
Critical
c5fee6e4-b985-4190-953b-133bc90e47da
Freshmail <= 1.5.8 - Multiple SQL Injections
Critical
9ba74e58-0647-4283-9fa3-428976c54474
rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection
Medium
a1af63f6-329e-40b6-b786-302c608ac577
Social Media Share Buttons | MashShare < 2.3.1 - Information Disclosure
Critical
2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 3.4 - SQL Injection
Medium
CVE-2015-9366
Exchange Addon Custom URL Tracking < 1.1.0 - Reflected Cross-Site Scripting
Critical
CVE-2015-3313
Community Events < 1.4 - SQL Injection
High
784e3b21-08f5-4cbc-b726-fe60e1faefea
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.4.95 - SQL Injection
Critical
6b456815-ffdf-41fb-b4a8-0f22fd059d34
AJAX Store Locator <= 1.2 - SQL Injection
Critical
c96507cf-3c2d-4516-92f5-d08384aa6b1a
WORDPRESS VIDEO GALLERY <= 2.8 - SQL Injection
High
3762cd92-604a-4dac-a09e-6b4a08c4d804
Duplicator <= 0.5.14 - SQL Injection
High
3ba84be8-c6dc-4cb7-b93c-38c69ab07154
WP REST API (WP API) < 1.2.1 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.