Medium
0a33282c-2adb-4f26-8fc4-918a48bfd040
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Critical
b6ee571d-8db6-4e21-9a62-44e562b9a5fc
Pie Register 2.0.14-2.0.15 - SQL Injection
Critical
053bb01c-9e87-4836-ae1c-567272b21118
Registration Forms – User Profile, Custom Registration Form, Login Form, Invitation-Based Registrations for WordPress 2.0.14 - 2.0.15 - Authentication Bypass
Medium
CVE-2015-9504
Weekly News < 2.2.9 - Cross-Site Scripting
High
CVE-2015-3634
Slideshow 2.2.8 - 2.2.21 - Information Exposure
High
CVE-2015-9497
Ad Inserter – Ad Manager & AdSense Ads < 1.5.3 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2015-10117
GF Windcave Free <= 1.4.3 - Reflected Cross-Site Scripting
Critical
b108ba89-56c4-44a8-af61-ccd6f7f73562
AA-Team Premium SEO Pack <= 1.8.0 - Local File Disclosure and Arbitrary File Upload
Medium
CVE-2015-3301
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Directory Traversal
High
CVE-2015-3302
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Sensitive Information Disclosure
Medium
6b36fcc5-1f09-43b9-8877-7af6c7652db7
White Label CMS <= 1.5.2 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2015-3300
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Multiple Cross-Site Scripting
Critical
9ba74e58-0647-4283-9fa3-428976c54474
rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection
High
CVE-2015-9345
Link Log – external link click monitor <= 1.4 - HTTP Response Splitting
Medium
CVE-2015-9500
Exquisite - Ultimate Newspaper Theme <= 1.3.3 - Cross-Site Scripting
High
CVE-2015-3440
WordPress Core < 4.2.1 - Cross-Site Scripting via Comments
High
CVE-2015-9498
WPS Hide Login <= 1.0 - Cross-Site Request Forgery
High
0d50f217-7a53-49bf-9ce9-9922d0b3e18b
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read
Medium
CVE-2015-10078
Resend Welcome Email <= 1.0.1 - Reflected Cross-Site Scripting
Medium
e9178920-d865-45d3-bfdf-b8ad207d4546
FeedWordPress < 2015.0426 - Cross-Site Scripting
Unrated
301
"J-ClassifiedsManager" by CMSjunkie
Critical
c1f64b77-5c8b-44f3-b1a8-6aa9f13624b7
WooCommerce Amazon Affiliates < 9.0.2.16 - Unauthenticated Arbitrary File Upload
Medium
a1af63f6-329e-40b6-b786-302c608ac577
Social Media Share Buttons | MashShare < 2.3.1 - Information Disclosure
Medium
81ca577d-5337-4d46-94bb-93c230cf0348
The7 — Website and eCommerce Builder for WordPress <= 2.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.