High
CVE-2014-9037
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2014-8801
Paid Memberships Pro < 1.7.15 - Directory Traversal
Medium
CVE-2014-8815
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.6 - Reflected Cross-Site Scripting
Medium
CVE-2014-8491
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 4.25 - Sensitive Data Exposure
High
CVE-2014-8607
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
High
CVE-2014-8605
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure
High
CVE-2014-8604
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
High
CVE-2014-8335
WP-DBManager < 2.72 - Command Injection
Medium
CVE-2014-8336
WP DB Manager < 2.7.2 - Arbitrary File Read
Medium
CVE-2014-6604
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting
Critical
7887e0a6-53bf-49c7-a7a6-7c65cec28cae
Refraction <= 1.3 - Multiple Vulnerabilities
High
CVE-2014-7152
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
High
CVE-2014-6242
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
Medium
CVE-2014-3907
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
High
CVE-2014-4726
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Medium
CVE-2014-6230
WP-Ban < 1.64 - Improper Input Validation
High
bd563af4-b97f-4746-a5e9-8dc5dfda272e
Authentic <= 2.0.4 - Arbitrary File Download
Medium
569c8faf-bd2a-4c61-a8c7-d4cab36e5727
Ready! Coming Soon <= 0.5.0 Stored Cross-Site Scripting and Cross-Site Request Forgery
Medium
CVE-2014-0173
Jetpack < 2.9.3 - Security Bypass
High
416ab7d5-9f3b-4ccc-9a0f-bfe5d38b6f97
KenBurner Slider (All Versions) - Path Traversal
Medium
CVE-2014-125100
Job Board by BestWebSoft <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Low
CVE-2014-5240
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
Low
CVE-2014-5265
WordPress Core < 3.9.2 - Denial of Service via XML
Medium
CVE-2011-5194
WHOIS <= 1.4.2.2 - Reflected Cross Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.