High
1d14779f-3ee5-4a55-b49d-e9162db2f4a2
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2014-9037
Wordpress Core < 4.0.1 - Hash Collision
Medium
CVE-2014-9036
WordPress Core < 4.0.1 - Cross-Site Scripting via CSS
High
efdf76b2-7640-4384-a72b-789159eb9c86
Watu Quiz <= 2.5.0.1 - Stored Cross-Site Scripting
High
CVE-2014-10390
WP Support Plus Responsive Ticket System <= 4.1 - Directory Traversal
Critical
CVE-2014-10389
WP Support Plus Responsive Ticket System <= 4.1 - Improper Authentication
High
CVE-2014-8801
Paid Memberships Pro < 1.7.15 - Directory Traversal
Medium
CVE-2014-9179
SupportEzzy Ticket System Plugin <= 1.2.5 - Cross-Site Scripting
High
CVE-2014-8799
DukaPress < 2.5.4 - Directory Traversal
Medium
CVE-2014-8584
SpiderVPlayer <= 1.5.1 - Cross-Site Scripting
Critical
CVE-2014-8877
CM Download Manager <= 2.0.3 - Code Injection
Medium
CVE-2014-10013
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - SQL Injection
High
fca24e26-149f-4805-9097-f7d11485a690
Contact Form by WD – responsive drag & drop contact form builder tool <= 1.7.18 - Authorization Bypass
Medium
CVE-2014-10012
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - Cross-Site Scripting
Medium
db5e26cf-e6c7-4b79-807a-643a1effd2a0
Link Library <= 5.8.10.6 - Reflected Cross-Site Scripting
Medium
bb5178f4-356b-4352-96ca-500e49006f8a
ThemeBlvd Themes/Plugins (Various Versions) - Missing Authorization Checks
Medium
CVE-2014-8955
Contact Form Clean and Simple < 4.4.1 - Cross-Site Scripting
Medium
CVE-2014-8815
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.6 - Reflected Cross-Site Scripting
High
CVE-2014-8803
Smart Forms – when you need more than just a contact form <= 2.1.0 - Missing Authorization
Medium
CVE-2014-8814
WP Photo Album Plus <= 5.4.17 - Reflected Cross-Site Scripting
Medium
CVE-2014-8749
BulletProof Security < .51.1 - Server-Side Request Forgery
High
CVE-2014-8807
Contact Bank – Contact Form Builder for WordPress <= 2.0.69 - Stored Cross-Site Scripting
High
66b91fe9-ceb3-485c-bf5f-a672656d4e86
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload
Critical
CVE-2014-8621
Store Locator 2.3 - 3.11 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.