Medium
CVE-2014-6444
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2014-6445
Contact Form 7 Integrations 1.0 - 1.3.10 - Multiple Cross-Site scripting
Critical
CVE-2014-6446
Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload
Critical
CVE-2012-5310
WP eCommerce < 3.8.7.6 - SQL Injection
Medium
CVE-2014-6604
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting
High
CVE-2014-5389
Content Audit <= 1.6.0 - Authenticated (Admin+) SQL Injection
Low
CVE-2014-6315
Photo Gallery by 10Web <= 1.1.30 - Reflected Cross-Site Scripting
Medium
CVE-2015-9230
BulletProof Security < .52.5 - Cross-Site Scripting
Critical
86eb42de-a820-4ba7-99cb-03d068e208a9
Category and Page Icons <= 0.9.1 - Arbitrary File Upload and Deletion
High
6e327239-b4f0-4d21-b25e-f015498981cb
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - SQL Injection
Medium
CVE-2014-5187
Tom M8te <= 1.5.3 - Directory Traversal
Medium
CVE-2014-9094
DZS Video Gallery < 7.95 - Multiple Cross-Site Scripting
Medium
582e2896-d800-4d73-8cef-8af76cba1ba8
DZS Video Gallery < 7.95 - Limited Local File Inclusion
Medium
CVE-2011-4955
bSuite <= 5 alpha 2 - Multiple Cross-Site Scripting
High
47938357-7d51-4d62-a08c-4b2bf3f3a062
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
High
CVE-2014-7152
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
High
CVE-2014-5324
Frontend File Manager Plugin < 3.6 - Arbitrary File Upload
High
CVE-2014-125099
I Recommend This <= 3.7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2014-6242
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
Medium
CVE-2014-7181
MaxButtons < 1.26.1 - Reflected Cross-Site Scripting
Critical
CVE-2014-10376
I Recommend This < 3.7.3 - SQL Injection
Medium
CVE-2014-3907
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
High
CVE-2014-4726
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Critical
f188c032-6f36-45a9-9ca8-39bfe91c97d4
Konzept (Unkown Versions) - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.