Medium
CVE-2015-9305
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
High
2224b17e-e327-4b86-85db-ad878f989839
QAEngine <= 1.4 - Privilege Escalation
Unrated
300
"Simple Email Form" by unlikelysource.com - 1.8.5 and below
Medium
CVE-2015-10114
WooSidebars <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-10093
Mark User as Spammer <= 1.0.1 - Reflected Cross-Site Scripting
Medium
a60d8102-1f15-4e61-b715-81e2111651a4
Add Link to Facebook <= 1.215 - Authenticated Stored Cross-Site Scripting
Critical
a30863c5-2e94-4952-b360-856394262023
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload
Medium
CVE-2015-9320
Option Tree <= 2.5.3 - Cross-Site Scripting
Medium
CVE-2015-10112
WooFramework Branding <= 1.0.1 - Reflected Cross-Site Scripting
Medium
5463a730-a8cf-40c9-83fc-3e451e4db1c9
CM Tooltip Glossary – Better SEO and UEX for your WP site <= 3.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2015-10113
WooFramework Tweaks <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-10104
Icons for Features <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2015-10115
WooSidebars Sidebar Manager Converter <= 1.1.1 - Reflected Cross-Site Scripting
High
0f2e39b3-c18c-4660-b23d-00790156bc7f
Ultimate Product Catalog < 3.1.3 - Multiple Vulnerabilities
Medium
CVE-2015-9321
Shortcode Factory <= 1.1 - Reflected Cross-Site Scripting
High
680746a3-8a72-4ec2-9f58-d744f40168ed
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 - Remote Code Execution
High
CVE-2015-3438
WordPress Core < 4.1.2 - Cross-Site Scripting
High
CVE-2015-10132
WP SpreadPlugin < 3.8.6.2 - Cross-Site Scripting
Critical
2e88aa9e-6d1d-44ba-8d63-2f4d4161bc9e
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 3.4 - SQL Injection
Medium
CVE-2015-9366
Exchange Addon Custom URL Tracking < 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2015-9355
Two Factor Authentication < 1.1.10 - Cross-Site Scripting
Medium
CVE-2015-9525
Easy Digital Downloads – Recurring Payments <= 2.3 - Cross-Site Scripting
Medium
CVE-2015-9371
Manual Purchases < 1.1.0 - Reflected Cross-Site Scripting
Medium
f2448450-9d0e-42bc-bfdb-66861b2f212c
Gravityforms <= 1.9.6 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.