Medium
CVE-2014-8754
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2014-8810
WP Symposium < 14.11 - Authenticated SQL Injection
Medium
a06812c5-43db-4c32-a9fb-f7b86900a741
Contact Form DB <= 2.8.17 - Reflected Cross-Site Scripting
Low
CVE-2014-9174
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.1.2 - Cross-Site Scripting
Medium
CVE-2014-9177
HTML5 MP3 Player with Playlist <= 2.7.0 - Full Path Disclosure
Critical
cb2e9370-f50e-4792-99f6-4678e0256a56
Gallery Bank – WordPress Photo Gallery Plugin < 3.0.61 - Arbitrary File Upload
Critical
6ab975b0-4216-46df-bf5e-91e403728e5b
wpDataTables <= 1.5.3 - Arbitrary File Upload
Critical
CVE-2014-9735
Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Upload
Critical
CVE-2015-9499
Showbiz Pro Responsive Teaser WordPress Plugin <= 1.7.1 - Arbitrary File Upload
High
CVE-2014-9260
WordPress Download Manager <= 2.7.2 - Authenticated Arbitrary Options Update
Critical
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
High
CVE-2014-125091
Polls CP <= 1.0.1 - Authenticated SQL Injection
Critical
CVE-2014-9175
wpDataTables (Premium) <= 1.5.3 - SQL Injection
High
a0850b88-09f0-4da8-a9be-1b4aacf610e0
Contact Form Email < 1.0.1 - Cross-Site Scripting
High
CVE-2014-9032
WordPress Core < 4.0.1 - Cross-Site Scripting via media-playlists
High
CVE-2015-2220
Ninja Forms Contact Form <= 2.8.8 - Stored Cross-Site Scripting
Medium
CVE-2014-9035
WordPress Core < 4.0.1 - Cross-Site Scripting
High
CVE-2014-9039
WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset
Medium
CVE-2014-9031
WordPress Core < 4.0.1 - Cross-Site Scripting via Shortcode Brackets
Medium
CVE-2014-10395
Polls CP < 1.0.1 - Cross-Site Scripting
Medium
CVE-2014-9034
WordPress Core < 4.0.1 - Denial of Service via Long Password
Critical
CVE-2014-9178
SP Project & Document Manager < 2.4.4 - Multiple SQL Injection
High
CVE-2014-9038
WordPress Core < 4.0.1 - Server-Side Request Forgery
Medium
CVE-2014-125096
Gallery Manager <= 1.5.12 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.