High
CVE-2015-4089
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2015-4066
GigPress <= 2.3.8 - SQL Injection
Medium
5ec6211b-783b-4375-972b-adcaf9f9f526
Easy Author Image <= 1.5 - Email Information Exposure
Medium
395ff912-dad7-4dff-8bc4-bc58ecc96a90
Esplanade < 1.1.5 - Cross-Site Scripting
Medium
CVE-2015-4065
WordPress Landing Pages <= 1.8.4 - Cross-Site Scripting
Medium
CVE-2015-4063
NewStatPress <= 0.9.8 - Authenticated Cross-Site Scripting
High
9d2df49d-0276-403d-9fe8-00fdf7262818
NextScripts: Social Networks Auto-Poster <= 3.4.17 - Stored Cross-Site Scripting
High
CVE-2015-4062
NewStatPress <= 0.9.8 - Authenticated SQL Injection
High
CVE-2015-4064
WordPress Landing Pages <= 1.8.4 - Authenticated SQL Injection
Medium
3408bdfd-6337-4c26-b0f2-377375d0e52c
Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Scripting
Low
14ccd915-a513-45a4-84d3-b2b1fb893f1c
Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Request Forgery
Medium
CVE-2015-10131
TFO Graphviz <= 1.9 - Reflected Cross-Site Scripting
High
CVE-2015-4084
Free counter <= 1.1 - Stored Cross-Site Scripting
Medium
CVE-2015-9300
Events Manager < 5.5.7 - Cross-Site Scripting
Medium
CVE-2015-4127
Church Admin < 0.810 - Stored Cross-Site Scripting
High
CVE-2015-3173
Custom Content Type Manager <= 0.9.8.5 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2015-10095
woo-popup <= 1.2.2 - Reflecte Cross-Site Scripting
High
CVE-2015-4038
WP Membership <= 1.2.3 - Privilege Escalation
Medium
CVE-2015-4039
WP Membership <= 1.2.3 - Cross-Site Scripting
High
CVE-2015-3647
WP Photo Album Plus < 6.1.3 - Cross-Site Scripting
Medium
CVE-2015-9346
Polls CP < 1.0.5 - Cross-Site Scripting
Critical
CVE-2015-4018
FeedWordPress < 2015.0514 - SQL Injection
High
CVE-2015-10134
Simple Backup <= 2.7.10 - Arbitrary File Download via Path Traversal
High
CVE-2014-5034
Brute Force Login Protection <= 1.5.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.