High
CVE-2015-10136
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2014-9570
Simple Security <= 1.1.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2014-100027
Slimstat Analytics <= 3.5.5 - Stored Cross-Site Scripting
Critical
8b783b94-7135-49c1-aff2-1c2ea24bbfcd
CIP4 Folder Download Widget < 1.11 - Local File Inclusion
Critical
CVE-2015-1055
Photo Gallery by 10Web <= 1.2.7 - Unauthenticated Blind SQL Injection via order_by Parameter
Critical
CVE-2014-7957
Pods <= 2.4.3 - Multiple Cross-Site Request Forgery
Medium
CVE-2014-7956
Pods <= 2.4.3 - Cross-Site Scripting
Medium
239bdac1-c14b-42ff-bee5-130d0bf3394c
Custom Sidebars < 2.1.0.2 - Reflected Cross Site Scripting
Medium
CVE-2015-9319
Greg's High Performance SEO <= 1.6.1 - Reflected Cross-Site Scripting
Medium
a3bdccfd-6b82-4a76-81f1-eb0f6d62d413
Slideoptinprox (Unspecified Version) - Cross-Site Scripting
High
CVE-2014-9308
Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload
Medium
CVE-2015-1204
Slimstat Analytics <= 3.9.2 - Cross-Site Scripting
Medium
53686d01-b60c-4324-895e-2fae3ccfa3c9
MP3-jPlayer <= 1.8.11 - Cross-Site Scripting
Medium
CVE-2014-9443
Relevanssi – A Better Search < 3.3.8 - Cross-Site Scripting
Medium
d5d3e333-4dcd-414b-85a6-8d9fbef357bd
SEO Friendly Images <= 3.0.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2014-9396
SimpleFlickr <= 3.0.3 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2015-0920
Banner Effect Header <= 1.2.7 - Cross-Site Request Forgery
Medium
CVE-2014-9461
Cart66 Lite - WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure
High
CVE-2014-9511
Sell Downloads <= 1.0.1 - Arbitrary File Read
Critical
CVE-2014-9473
cformsII < 14.8 - Arbitrary File Upload
Medium
CVE-2014-9444
Frontend Uploader < 0.9.4 - Cross-Site Scripting
Medium
d3e0f601-d445-4805-858a-8ad1ce9e62df
Dewplayer <= 1.2 - Cross-Site Scripting
Medium
CVE-2014-9310
WordPress Backup to Dropbox < 4.1 - Reflected Cross-Site Scripting
High
CVE-2014-9442
Cart66 Lite :: WordPress Ecommerce <= 1.5.3 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.