Critical
CVE-2015-9326
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Critical
CVE-2015-2825
Simple Ads Manager <= 2.5.94 - Arbitrary File Upload
High
CVE-2015-10116
Favicon by RealFaviconGenerator <= 1.2.12 - Reflected Cross-Site Scripting
Medium
CVE-2015-0902
All in One SEO <= 2.2.5.1 - Information Disclosure
Medium
0227e5f0-61fa-4e78-9bd4-918fdde7ab58
WordPress Leads < 1.6.3 - Authorization Bypass
Medium
db2a2ca9-a12c-412d-80f7-66f1dc3e09af
Newsletter <= 3.8.2 - Open Redirect
Critical
CVE-2015-9272
VideoWhisper Video Presentation <= 4.1.4 - Arbitrary File Upload
High
8a87bbfe-8cf5-4bba-90bc-902071b72bca
Aspose.PDF Exporter < 2.0 - Arbitrary File Download
High
4beafd91-1b89-484b-8053-b1bffdaf163a
Aspose.Words – Import and Export word documents < 2.0 - Arbitrary File Download
Critical
CVE-2015-9271
Webcam Video Conference <= 4.91.8 - Unrestricted File Upload leading to Remote Code Execuction
Unrated
295
youtube plugin - youtubejoomla - 1.1
Medium
abb41236-d711-41d3-a1cd-2c23467e269a
Aspose Cloud eBook Generator <= 1.0 - Directory Traversal
High
CVE-2015-0901
flashy <= 1.3 - Cross-Site Scripting
High
6c439914-1d5a-4607-8e5c-9279fa3b462c
Ajax Search Lite < 3.11 - Missing Authorization to Remote Code Execution
High
CVE-2015-1785
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Arbitrary File Upload
High
CVE-2015-1784
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Cross-Site Request Forgery
Medium
135213d6-8058-4573-a97d-a95b0708d807
Ptengine – Heatmap Analytics < 1.0.2 - Reflected Cross-Site Scripting
Critical
3ccd7300-f22a-405a-8087-9c750cb187a5
InBoundio Marketing < 2.0.1 - Arbitrary File Upload
High
CVE-2015-2755
AB Google Map Travel (AB-MAP) < 4.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2014-9014
Marketplace <= 2.4.0 - Path Traversal
High
CVE-2014-9013
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 2.4.0 - Arbitrary File Download
High
a53a1178-7267-4d7f-ad9e-2906c05b8fe0
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Stored Cross-Site Scripting
High
95cd2bae-4ab7-4a0c-bb71-c17b119eaaa9
All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export
High
2ae0d83b-a444-4141-89da-b63ce216db17
Ajax Search Pro <= 3.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.