Critical
c96507cf-3c2d-4516-92f5-d08384aa6b1a
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,504
Unrated
296
Joomla Simple Photo Gallery version
Unrated
279
AllVideos version
Critical
CVE-2015-10137
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
Critical
CVE-2015-9333
cformsII < 14.6.10 - SQL Injection
Medium
c342fe87-59f3-43e9-8694-cc2551650a91
Fusion Engage <= 1.0.5 - Local File Inclusion
High
3762cd92-604a-4dac-a09e-6b4a08c4d804
Duplicator <= 0.5.14 - SQL Injection
High
5aeca3b6-6b1b-40b5-8824-de4a90c7ddc3
Gantry 4 Framework <= 4.1.3 - Remote Code Execution
High
3ba84be8-c6dc-4cb7-b93c-38c69ab07154
WP REST API (WP API) < 1.2.1 - Sensitive Information Disclosure
Critical
1e37e54b-9c00-4d04-9c81-791242d45d6c
iDump iPhone to WordPress Photo Uploader <= 1.8 - Arbitrary File Upload
Critical
CVE-2015-9530
Easy Digital Downloads – Upload File <= 1.0.4 - Arbitrary File Upload/Deletion
High
CVE-2015-3986
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 Cross-Site Request Forgery
Medium
CVE-2015-3429
Twenty Fifteen Theme <= 1.1 & WordPress Core < 4.2.2 - Cross-Site Scripting via example.html
High
fe93f443-7941-4463-a068-c292c172f071
S3 Bubble Amazon S3 HTML5 Video with Adverts <= 2.0 - Arbitrary File Download
Medium
CVE-2014-9311
WordPress Social Sharing, Related Posts & Analytics – Shareaholic < 7.6.1.0 - Authenticated (Subscriber+) Cross-Site Scripting
High
353804e8-0d5a-4633-974c-6eb7a3eeba61
WP Super Cache < 1.4.3 - Cross Site Scripting
Unrated
278
spider random articles
Critical
CVE-2015-9310
All In One WP Security & Firewall <= 3.9.0 - SQL Injection
High
b605027a-4d65-4bfe-9daa-5b2f88811bc7
Aspose Importer & Exporter (Discontinued) < 3.0 - Arbitrary File Download
Medium
029c3606-caba-4964-aefd-6000a1b4832d
WORDPRESS VIDEO GALLERY <= 3.0 - Improper Access Control
Medium
CVE-2015-2826
Simple Ads Manager 2.5.94 & 2.5.96 - Information Disclosure
Critical
781a15da-5747-4480-a8a6-2944632742c1
PHP Event Calendar for WordPress < 1.5.1 - Arbitrary File Upload
Critical
CVE-2015-2824
Simple Ads Manager < 2.7.97 - Multiple SQL Injections
Critical
CVE-2015-9326
WP Business Intelligence Lite <= 1.6.2 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.