Medium
CVE-2014-100009
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
68b4ef1f-93cc-4fbd-9713-9cbc6ad59f5e
Leaflet Maps Marker Pro < 1.5.8 - Arbitrary File Deletion
High
875b15a1-c747-4a74-a77e-d541f92468a3
Leaflet Maps Marker Pro < 1.5.8 - Path Traversal
High
66f71de2-055d-42f0-9eb1-145c64f44d5b
Google Analytics MU < 2.4 - Cross-Site Request Forgery
Medium
CVE-2014-1908
Broadcast Live Video – Live Streaming < 4.29.5 - Full Path Disclosure
High
CVE-2014-10381
User Domain Whitelist <= 1.4 - Cross-Site Request Forgery
High
cb855743-1d08-4e21-a23c-a4ffba615f57
NextGen Gallery <= 2.0 - Path Traversal
Critical
CVE-2014-2316
Search Everything <= 7.0.2 - SQL Injection
Medium
CVE-2014-1889
BuddyPress <= 1.9.1 - Authorization Bypass
Medium
CVE-2014-2040
Media File Renamer < 1.9.4 - Stored Cross-Site Scripting
High
CVE-2012-6629
Newsletter Manager < 1.4 - Cross-Site Request Forgery
High
eae1ee2c-1be5-4be5-8873-f99c8fdd41ba
lote27 (All Versions) - Arbitrary File Download
Medium
CVE-2014-100026
April's Super Functions Pack <= 1.4.7 - Reflected Cross-Site Scripting
Medium
13a1e293-f539-4d19-8fe8-392c126fd1c4
intouch <= 2.0 - Cross-Site Scripting
Critical
cb5d3d64-a465-4c26-9cf7-7acc7dab862a
Spicy Blogroll <= 1.0.0 - Local File Inclusion
Medium
dd8f348d-07ff-480d-bcc1-fb39aead1b1d
Folo (Unknown Versions) - Cross Site Scripting
Medium
c8958931-36be-47b7-9262-3061cff9be22
Amerisale-Re (All Versions) - Reflected Cross-Site Scripting
High
c7bb055d-dd43-4c40-be30-325ecb6d7731
Amplus (Unspecified Version) - Cross-Site Request Forgery
High
301f455f-1ffe-485a-8473-8a31a0633a5f
Dimension (Unknown Versions) - Cross-Site Request Forgery to Arbitrary File Upload
High
502cf45c-1350-4534-a806-6e248912ef6d
Floating Tweets <= 1.0.1 - Directory Traversal
Critical
056d26da-6e43-4cc6-b2fd-13a5947a814e
SAICO <= 1.0.2 - Arbitrary File Upload
Critical
ea9ee672-76d3-4d6a-b309-cd0023ca6c0d
Daily Deal (Unknown Versions) - Arbitrary File Upload
Critical
9766a657-1cf2-448a-bd66-a27c0ebd8261
Payment Gateways Caller for WP e-Commerce < 0.1.1 - Local File Inclusion
High
37f704bf-82bc-44f7-8b3c-cbf117732aaf
Dailydeal by Templatic < = 3.0.10 - Cross-Site Request Forgery to Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.