High
f2febf69-b146-4ca5-bfa9-f5477da5cd6c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
240cc19a-9bae-4e69-a16f-46901daaa945
Brandfolder – Digital Asset Management Simplified. < 3.0.1 - Local/Remote File Inclusion
Critical
CVE-2016-20082
A/B Test for WordPress <= 1.0.7 - Local File Inclusion
Critical
613e1862-e0b7-4012-a77d-b5fb56cbbb9c
360 Product Rotation <= 1.2.0 - Unauthenticated Arbitrary File Upload
Critical
48f7ad3b-608b-4802-b7ab-fad4c449cc62
SP Projects & Document Manager <= 2.6.0.0 - Arbitrary File Upload
Critical
f1b6fe67-cbd8-438f-8e06-d0f25eddc81a
Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor
High
7ee267ff-b650-44a5-994b-3a22d34722e8
WordPress Backup and Migrate Plugin – Backup Guard < 1.0.3 - Arbitrary File Upload
High
CVE-2016-0796
mb.miniAudioPlayer <= 1.7.6 - Multiple Vulnerabilities
Critical
8a2186c9-fa27-4d7d-be41-c82711c49334
WP User Frontend < 2.3.11 - Arbitrary File Upload
Medium
CVE-2016-2222
WordPress Core < 4.4.2 - Server-Side Request Forgery
Medium
CVE-2016-10996
Popup Builder by OptinMonster <= 1.1.4.5 - Remote Code Execution
High
01b3013f-60b9-449b-a2a9-64e37a1454ef
JM Twitter Cards < 6.2 - Full Path Disclosure
High
CVE-2015-10140
WordPress Infinite Scroll – Ajax Load More <= 2.8.1.1 - Arbitrary File Upload
High
CVE-2015-9406
mTheme-Unus < 2.3 - Directory Traversal to Unauthenticated Arbitrary File Read
Critical
741915a7-c88d-41e1-9347-1d5d6494d051
mTheme-Unus (All Versions) - Local File Inclusion
Medium
13981037-e698-42a7-9471-e27486cf1a4e
WP Super Cache <= 1.4.4 - Directory Listing
Critical
CVE-2015-1000012
MyPixs <= 0.3 - Local File Inclusion
Medium
CVE-2015-5715
WordPress Core < 4.3.1 - Authorization Bypass to Information Disclosure
High
CVE-2015-9473
estrutura-basica (All Known Versions) - Path Traversal
Medium
CVE-2015-6828
SecureMoz Security Audit <= 1.0.5 - PHP Object Injection
Critical
CVE-2014-10384
Memphis Documents Library <= 2.6.16 - Local File Inclusion
High
CVE-2015-10144
Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
50589b41-cc2b-4ffa-ab63-509fb9d61be2
NextGen Gallery <= 2.1.7 - Path Traversal
Critical
CVE-2015-9435
WP OAuth Server (OAuth Authentication) < 3.1.5 - Pseudorandom Number Generation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.