Medium
CVE-2015-2195
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
High
e2c11005-dcb3-40b3-863a-0612132acb08
Slimstat Analytics < 3.9.6 - Unauthenticated Blind SQL Injection
Medium
7dc9973a-4b5f-4efb-8df5-df1cbf9fe3b0
EZ Portfolio (Unmaintained) < 1.0.2 - Cross-Site Scripting
Medium
CVE-2015-2040
Contact Form DB <= 2.8.26 - Authenticated Cross-Site Scripting
High
7a46c049-367d-4a67-9607-c74ef0b96c71
Ultimate CSV Importer < 3.6.75 - Information Disclosure
Medium
7c6ea33f-ee43-4df8-9633-60303b68b859
AdPlugg WordPress Ad Plugin < 1.1.34 - Cross-Site Scripting
High
13e7c4ab-7856-41a5-8cd9-4f8118af534d
Gallery Bank – WordPress Photo Gallery <= 3.0.101 - SQL Injection
High
CVE-2015-2084
Easy Social Icons <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2014-9262
Duplicator < 0.5.10 - Arbitrary Backup Creation and Download
High
CVE-2015-2218
WonderPlugin Audio Player < 2.1 - Multiple Cross-Site Scripting
High
CVE-2015-2199
WonderPlugin Audio Player <= 2.0 - Blind SQL Injection
High
CVE-2015-0260
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.
Unrated
CVE-2015-1613
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.
Medium
CVE-2015-10127
PlusCaptcha <= 2.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2015-1614
Image Metadata Cruncher < 1.8 - Reflected Cross Site Scripting
Unrated
273
Gallery WD version
Critical
CVE-2015-2196
SpiderCalendar <= 1.4.9 - Unauthenticated SQL Injection
High
CVE-2015-2194
Fusion <= 3.1 - Arbitrary File Upload
High
CVE-2014-9312
Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload
Critical
CVE-2015-2065
Wordpress Video Gallery <= 2.7 - SQL Injection
High
CVE-2014-6412
WordPress Core < 4.4 - Brute Force Password Recovery Tokens
Critical
CVE-2015-10099
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection
Medium
CVE-2015-1581
Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Medium
CVE-2015-9332
WordPress Uninstall <= 1.2.1 - Cross-Site Request Forgery to Site Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.