High
CVE-2015-3440
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2015-9498
WPS Hide Login <= 1.0 - Cross-Site Request Forgery
High
0d50f217-7a53-49bf-9ce9-9922d0b3e18b
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read
Medium
CVE-2015-10078
Resend Welcome Email <= 1.0.1 - Reflected Cross-Site Scripting
Medium
e9178920-d865-45d3-bfdf-b8ad207d4546
FeedWordPress < 2015.0426 - Cross-Site Scripting
Critical
c1f64b77-5c8b-44f3-b1a8-6aa9f13624b7
WooCommerce Amazon Affiliates < 9.0.2.16 - Unauthenticated Arbitrary File Upload
Medium
a1af63f6-329e-40b6-b786-302c608ac577
Social Media Share Buttons | MashShare < 2.3.1 - Information Disclosure
Medium
81ca577d-5337-4d46-94bb-93c230cf0348
The7 — Website and eCommerce Builder for WordPress <= 2.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2015-9305
WP Google Map Plugin < 2.3.7 - Reflected Cross-Site Scripting
High
2224b17e-e327-4b86-85db-ad878f989839
QAEngine <= 1.4 - Privilege Escalation
Medium
CVE-2015-10114
WooSidebars <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-10093
Mark User as Spammer <= 1.0.1 - Reflected Cross-Site Scripting
Medium
a60d8102-1f15-4e61-b715-81e2111651a4
Add Link to Facebook <= 1.215 - Authenticated Stored Cross-Site Scripting
Critical
a30863c5-2e94-4952-b360-856394262023
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload
Medium
CVE-2015-9320
Option Tree <= 2.5.3 - Cross-Site Scripting
Medium
CVE-2015-10112
WooFramework Branding <= 1.0.1 - Reflected Cross-Site Scripting
Medium
5463a730-a8cf-40c9-83fc-3e451e4db1c9
CM Tooltip Glossary – Better SEO and UEX for your WP site <= 3.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2015-10113
WooFramework Tweaks <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-10104
Icons for Features <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2015-10115
WooSidebars Sidebar Manager Converter <= 1.1.1 - Reflected Cross-Site Scripting
High
0f2e39b3-c18c-4660-b23d-00790156bc7f
Ultimate Product Catalog < 3.1.3 - Multiple Vulnerabilities
Medium
CVE-2015-9321
Shortcode Factory <= 1.1 - Reflected Cross-Site Scripting
High
680746a3-8a72-4ec2-9f58-d744f40168ed
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 - Remote Code Execution
High
CVE-2015-3438
WordPress Core < 4.1.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.