Medium
2c889c8e-7546-45bd-884b-7fb0199e595b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2015-9336
Clean Login <= 1.5 - Reflected Cross-Site Scripting
High
CVE-2015-9447
Unite Gallery Lite < 1.5 - Cross-Site Request Forgery and SQL Injection
High
CVE-2015-9446
Unite Gallery Lite < 1.5 - SQL Injection
High
c296743a-ec08-4cdd-b3d0-ab3de93f5bb9
Music Store – WordPress eCommerce < 1.0.15 - Open Redirect
High
CVE-2015-9445
Unite Gallery Lite <= 1.4.6 - Cross-Site Request Forgery & Authenticated SQL Injection
High
CVE-2015-9448
SendPress Newsletters < 1.2 - Authenticated SQL Injection
Medium
CVE-2015-5623
WordPress Core < 4.2.3 - Authorization Bypass
Medium
5570b8ef-6fb9-4f9e-be39-d8c615d1abab
SendPress Newsletters < 1.2 - Cross-Site Scripting
Medium
CVE-2015-5622
WordPress Core < 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
feab189a-bd89-461d-b553-f137b8032e94
Easy Social Icons <= 1.2.3.1 - SQL Injection
High
8dc548cd-16ea-47ac-b4be-eecaf4799690
Responsive Slider – Image Slider – Slideshow for WordPress <= 2.8.6 - Authenticated SQL Injection
High
CVE-2015-9449
Microblog Poster < 1.6.2 - Authenticated Blind SQL Injection
High
CVE-2015-5533
Count per Day <= 3.4 - Cross-Site Request Forgery
Medium
CVE-2015-5532
Paid Memberships Pro < 1.8.4.3 - Multiple Cross-Site Scripting
Medium
CVE-2015-9273
Slimstat Analytics < 4.1.6.1 - Cross-Site Scripting
High
f771cf62-3aa9-472e-beb5-011a4f28e335
Social Media Share Buttons & Social Sharing Icons <= 1.2.1 - Unspecified Vulnerabilities
Medium
CVE-2015-6523
Portfolio Plugin < 1.05 - Cross-Site Request Forgery
High
CVE-2015-9269
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.1.3 - Sensitive Information Exposure
High
CVE-2015-1000007
wptf-image-gallery <= 1.0.3 - Arbitrary File Download
Critical
CVE-2015-9451
Plugmatter Optin Feature Box < 2.0.14 - SQL Injection
Medium
b3247bb3-3d9a-49b5-99ec-f4b305d37ae5
WordPress Download Manager <= 2.7.94 - Stored Cross-Site Scripting
Medium
CVE-2015-9453
Broken Link Manager < 0.6.0 - Cross-Site Scripting
Critical
CVE-2015-9452
NEX-Forms – Ultimate Form Builder < 4.6.1 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.