Medium
03ddef11-04cb-4639-afb0-f123b339b9ae
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Medium
CVE-2015-9527
Easy Digital Downloads – Simple Shipping <= 2.1.3 - Cross-Site Scripting
Unrated
299
RD Download - 0.9.0 and below
Unrated
294
Kunena - 3.0.7 and previous
Medium
CVE-2015-10110
TinyChat Room Spy <= 1.2.8 - Reflected Cross-Site Scripting
High
CVE-2015-1852
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
High
784e3b21-08f5-4cbc-b726-fe60e1faefea
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.4.95 - SQL Injection
High
bfe10de1-1c1f-437b-8851-7024fce753be
WP-Mon <= 0.5.1 - Arbitrary File Download
High
a7c32efa-1872-4302-a947-dc0005080e55
Citizen Space <= 1.1 - Reflected Cross-Site Scripting
Medium
87ca4c05-b9fc-4932-be4b-beb57ca3bb7e
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
Critical
6b456815-ffdf-41fb-b4a8-0f22fd059d34
AJAX Store Locator <= 1.2 - SQL Injection
Medium
f7cb3540-ffdb-4b4c-a518-4ca8232ab53f
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
b0907cb0-b101-4c88-9a8b-b35133e1d0a2
MiwoFTP < 1.0.6 - Cross-Site Request Forgery leading to Remote Code Execution
Medium
CVE-2014-4518
Contact Form by ContactMe.com <= 2.3 - Cross-Site Scripting
High
CVE-2015-9337
Profile Builder <= 2.1.3 - Missing Access Controls
High
1ab0d9f3-0185-41f1-bab5-f47f828fa79c
MiwoFTP < 1.0.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Unrated
285
ECommerce-WD [com_ecommercewd] - maybe earlier
Unrated
287
Creative Contact Form [com_creativecontactform] - 2.0.0 and previous
Medium
e6de7a25-3079-4023-9faa-7a63952afe25
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Medium
c6168ee5-5df3-4d79-96bb-95029f2ac54b
iThemes Security <= 4.6.12 - Stored Cross-Site Scripting
Medium
CVE-2015-3325
WP Symposium < 15.4 - SQL Injection
High
2db8e79f-e70b-421f-8120-7aa65e704deb
MiwoFTP < 1.0.5 - Arbitrary File Download
Unrated
292
Spider Form Maker by Web-Dorado [com_formmaker] - 3.4 and lower
Unrated
298
Face Gallery by Apptha [com_facegallery] version
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.