High
CVE-2014-6412
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2015-10099
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection
Medium
CVE-2015-1581
Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Medium
CVE-2015-9332
WordPress Uninstall <= 1.2.1 - Cross-Site Request Forgery to Site Reset
Medium
CVE-2015-1436
Easing Slider <= 2.2.0.6 - Cross-Site Scripting
Critical
fa2bc3ae-1162-496b-8bc3-5bee1c0ff702
Cherry Plugin < 1.2.7 - Arbitrary File Upload
High
b94facce-975f-4080-ad67-95d282b28d0d
WPBakery Page Builder for WordPress (formerly Visual Composer) <= 4.7.3 - Multiple Cross-Site Scripting Issues
High
e92cc6a3-062c-4f0e-9539-07d0fa0e9404
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.4.36 - SQL Injection
Critical
6bf743b1-5a59-4e22-8c59-3c17b2646ec8
Store Locator < 3.34 - SQL Injection
High
CVE-2015-1580
Redirection Page <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2015-2089
CrossSlide jQuery Plugin <= 2.0.5 - Multiple Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2015-10139
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
High
f795a46c-ba0c-45d5-9ff7-638752f1681b
User Meta Manager < 3.4.7 - Authenticated Blind SQL Injection
Medium
CVE-2015-1494
FancyBox for WordPress <= 3.0.2 - Stored Cross-Site Scripting
Critical
c75bfba9-b25a-4966-835c-8d22736de809
UpdraftPlus WordPress Backup Plugin <= 1.9.50 - Nonce Leak to Authorization Bypass
Medium
CVE-2015-10094
Fastly <= 0.97 - Reflected Cross-Site Scripting
High
bb1742fd-7f0c-4a14-aa9c-f2863fcccd17
Revive Old Posts – Social Media Auto Post and Scheduling Plugin < 8.0.0 - Authorization Bypass
Medium
CVE-2015-9350
Feed Them Social <= 1.6.9 - Reflected Cross-Site Scripting
High
86566819-ec2e-4d56-87f6-4cd4b6de6192
Quasar - WordPress Theme with Animation Builder <= 1.9.2 - Authorization Bypass
High
CVE-2015-10124
Most Popular Posts Widget <= 0.8 - Authenticated (Admin+) SQL Injection
Critical
CVE-2015-9351
Feed Them Social <= 1.6.9 - Arbitrary Shortcode Execution
Medium
47c2bf75-fba1-4c37-b33a-f5e0e093fb78
SpiderVPlayer< 1.5.5 - Reflected Cross-Site Scripting
High
346a49ff-4e61-466b-b1fe-98cf5766accb
WordPress Calls to Action < 2.2.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2015-9472
Incoming Links < 0.9.10b - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.