Critical
fac29bb3-e534-4bee-9974-5ccac7d445db
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
daaa6507-cd8a-40c9-95af-34cc96551417
Tweet Wheel <= 0.2 - Missing Authorization Checks
High
cede59f9-611f-4da4-8140-181bd0a469d5
Contact Form by FormGet < 5.3.1 - Authenticated Stored Cross-Site Scripting
Critical
6aeb0352-66ab-45d4-ad61-f425d7d41f45
Daily Edition <= 1.6.2 - SQL Injection
Medium
CVE-2015-10105
IP Blacklist Cloud <= 3.42 - Authenticated (Admin+) Path Traversal
High
82619274-4339-44ba-b50c-d1194c34b695
IgnitionDeck Crowdfunding Platform <= 1.1.6 - Missing Authorization
Medium
7e9dcedd-aa81-47c4-9fc5-cecc7bc394b5
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2015-0894
All In One WP Security & Firewall <= 3.8.7 - SQL Injection
Low
CVE-2015-0895
All In One WP Security & Firewall <= 3.8.9 - Cross-Site Request Forgery
Critical
9d8551b8-67b9-45a8-9357-9e42fb451606
Ya'aburnee <= 1.0.7 and Dignitas <= 1.1.9 - Privilege Escalation
Medium
691c0f3b-b723-4310-b4df-ed3e1db9d548
WP Plugin Info Card < 2.3.7 - Cross-Site Scripting
Medium
CVE-2015-1874
Contact Form DB <= 2.8.29 - Cross-site request forgery via a request in the CF7DBPluginSubmissions page to wp-admin/admin.php
Critical
CVE-2015-10087
DesignFolio Plus Theme (Unkown Versions) - Arbitrary File Upload
Medium
CVE-2015-0890
reCaptcha by BestWebSoft <= 1.12 - CAPTCHA Bypass
Critical
5c75c156-225c-465a-8d03-35a6669e9c04
Calculated Fields Form <= 1.0.11 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2015-2792
WPML < 3.1.8 - Authorization Bypass
Critical
a6bf60cc-4a07-4d5d-bff3-20d0115a5bd3
Gravityforms <= 1.8.19 - Arbitrary File Upload
Medium
CVE-2015-9329
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
High
CVE-2015-2673
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Critical
37c22521-68ef-4d15-9633-8fe1af493a52
IP Blacklist Cloud < 3.41 - SQL Injections
Medium
CVE-2015-2195
WP Media Cleaner <= 2.2.6 - Cross-Site Scripting
High
e2c11005-dcb3-40b3-863a-0612132acb08
Slimstat Analytics < 3.9.6 - Unauthenticated Blind SQL Injection
Medium
7dc9973a-4b5f-4efb-8df5-df1cbf9fe3b0
EZ Portfolio (Unmaintained) < 1.0.2 - Cross-Site Scripting
Medium
CVE-2015-2040
Contact Form DB <= 2.8.26 - Authenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.