Critical
CVE-2015-6522
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2015-9440
Monetize <= 1.03 - Cross-Site Request Forgery to Cross-Site Scripting
High
71d63f0d-ce01-489e-bcc4-7632f1a4bb04
MainWP Dashboard and MainWP Child <= 2.0.22 - Unspecified Vulnerability
Medium
CVE-2015-9442
Avenir-soft Direct Download <= 1.0 - Cross-Site Scripting
Medium
CVE-2015-10092
Qtranslate Slug <= 1.1.16 - Reflected Cross-Site Scripting
Medium
ee74d229-499e-4f9a-ad7d-c707f6eeac6e
Ninja Forms Contact Form <= 2.9.21 - Reflected Cross-Site Scripting
High
CVE-2015-2213
WordPress Core < 4.2.4 - SQL Injection
Medium
CVE-2015-5734
WordPress Core < 4.2.4 - Cross-Site Scripting in Theme Preview
Medium
CVE-2015-5732
WordPress Core < 4.2.4 - Cross-Site Scripting via Widget Title
Medium
CVE-2015-5730
WordPress Core < 4.2.4 - Timing Side-Channel Attack
Medium
CVE-2015-2321
Job Manager - < 0.7.23 - Stored Cross-Site Scripting
Critical
CVE-2015-5731
WordPress Core < 4.2.4 - Cross-Site Request Forgery to Post Lockage
Medium
CVE-2015-5733
WordPress Core < 4.2.4 - Stored Cross-Site Scripting via accessibility-helper Title
Medium
CVE-2015-9429
YITH Maintenance Mode <= 1.1.4 - Reflected Cross-Site Scripting
High
b7fe772a-542e-4c3e-b1cb-05cce3b2ec3f
wordpress vertical image slider plugin < 1.2 - Cross-Site Request Forgery
Medium
CVE-2015-1000010
Simple Image Manipulator <= 1.0 - Remote File Download
Medium
7f51ae93-6880-4dc8-b183-424a8407f441
Livefyre Comments 3 <= 4.1.4 - Stored Cross-Site Scripting
Medium
CVE-2015-9469
Content Grabber <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Medium
5c59cfc2-2a2c-4b0b-88f7-f6a96caa25c4
Admin Pack by SITE CASEIRO <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
578b17d4-16cf-449a-9d99-cd9a0f7a8418
Database Sync < 0.5 - Reflected Cross-Site Scripting
Medium
CVE-2015-9270
The Holiday Calendar < 1.11.3 - Cross-Site Scripting
Medium
CVE-2015-5535
qTranslate <= 2.5.39 - Cross-Site Scripting
Critical
743d7370-cf33-481c-8d0a-c6f969e38b42
Email Before Download <= 3.4 - SQL Injection
Medium
CVE-2015-9327
Flickr Justified Gallery < 3.4.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.