Critical
CVE-2015-10087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2015-0890
reCaptcha by BestWebSoft <= 1.12 - CAPTCHA Bypass
Critical
5c75c156-225c-465a-8d03-35a6669e9c04
Calculated Fields Form <= 1.0.11 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2015-2792
WPML < 3.1.8 - Authorization Bypass
Critical
a6bf60cc-4a07-4d5d-bff3-20d0115a5bd3
Gravityforms <= 1.8.19 - Arbitrary File Upload
Medium
CVE-2015-9329
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
High
CVE-2015-2673
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Critical
37c22521-68ef-4d15-9633-8fe1af493a52
IP Blacklist Cloud < 3.41 - SQL Injections
Medium
CVE-2015-2195
WP Media Cleaner <= 2.2.6 - Cross-Site Scripting
High
e2c11005-dcb3-40b3-863a-0612132acb08
Slimstat Analytics < 3.9.6 - Unauthenticated Blind SQL Injection
Medium
7dc9973a-4b5f-4efb-8df5-df1cbf9fe3b0
EZ Portfolio (Unmaintained) < 1.0.2 - Cross-Site Scripting
Medium
CVE-2015-2040
Contact Form DB <= 2.8.26 - Authenticated Cross-Site Scripting
High
7a46c049-367d-4a67-9607-c74ef0b96c71
Ultimate CSV Importer < 3.6.75 - Information Disclosure
Medium
7c6ea33f-ee43-4df8-9633-60303b68b859
AdPlugg WordPress Ad Plugin < 1.1.34 - Cross-Site Scripting
High
13e7c4ab-7856-41a5-8cd9-4f8118af534d
Gallery Bank – WordPress Photo Gallery <= 3.0.101 - SQL Injection
High
CVE-2015-2084
Easy Social Icons <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2014-9262
Duplicator < 0.5.10 - Arbitrary Backup Creation and Download
High
CVE-2015-2218
WonderPlugin Audio Player < 2.1 - Multiple Cross-Site Scripting
High
CVE-2015-2199
WonderPlugin Audio Player <= 2.0 - Blind SQL Injection
Medium
CVE-2015-10127
PlusCaptcha <= 2.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2015-1614
Image Metadata Cruncher < 1.8 - Reflected Cross Site Scripting
Critical
CVE-2015-2196
SpiderCalendar <= 1.4.9 - Unauthenticated SQL Injection
High
CVE-2015-2194
Fusion <= 3.1 - Arbitrary File Upload
Critical
CVE-2015-2065
Wordpress Video Gallery <= 2.7 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.