Medium
CVE-2015-3998
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Critical
655e6486-e35f-4e7b-b894-55606d3eba56
WP Fast Cache <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2015-4337
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Cross-Site Scripting
High
CVE-2015-4336
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Command Execution
Critical
CVE-2015-4338
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Code Execution
High
CVE-2015-3904
Roomcloud < 1.3 - Cross-Site Scripting
High
CVE-2015-9339
WordPress File Upload < 2.7.1 - Arbitrary File Upload
Medium
CVE-2017-18553
Ad Buttons <= 2.3.1 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
bd9e5654-387e-4fc3-a6eb-2eface298a9c
Amazon Product in a Post Plugin < 3.5.3 - SQL Injection
Critical
78759abf-4584-4beb-9ae7-39a5c3fe4b75
YARPP – Yet Another Related Posts Plugin < 4.2.5 - Cross-Site Request Forgery
High
868bbe8c-6d21-4d4b-ae23-e08dfb7a1277
Ultimate Profile Builder < 3.0 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2015-8834
WordPress Core < 4.2.2 - Cross-Site Scripting via Comments
Medium
643cca2d-5a9a-4561-adf8-af9f0b3b0242
Embed Articles <= 7.0.3 - Reflected Cross-Site Scripting
High
CVE-2015-20105
ClickBank Affiliate Ads < 1.31 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2015-9496
Freshmail for WordPress <= 1.5.8 - SQL Injection
High
d8616189-5ab8-4db0-ab9e-768cc738aeb6
Jetpack <= 3.5.2 - Cross-Site Scripting
Critical
c5fee6e4-b985-4190-953b-133bc90e47da
Freshmail <= 1.5.8 - Multiple SQL Injections
Medium
CVE-2015-10107
Simplr Registration Form Plus+ <= 2.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2015-20106
ClickBank Affiliate Ads <= 1.20 - Cross-Site Scripting
Medium
CVE-2015-9501
Artificial Intelligence < 1.2.4 - Cross-Site Scripting
Medium
CVE-2015-9502
Auberge < 1.4.5 - Cross-Site Scripting
Medium
CVE-2015-3421
eShop <= 6.3.11 - Cross-Site Scripting
Medium
baa720d6-1891-4557-a744-830be56862e9
WordPress Shortcodes Plugin — Shortcodes Ultimate <= 4.9.3 - Cross-Site Scripting
Medium
CVE-2015-10125
Import CSV or XML Datafeed With Ease <= 3.7.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.