Medium
CVE-2014-125130
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
0b8af407-b49d-4d3f-a7a5-c3ad3d56fcba
WP Statistics <= 8.4 - Stored Cross-Site Scripting
Unrated
237
HDFLVPlayer - Directory Traversal
Unrated
236
edocuman - Other
Critical
a71a1a7b-6299-44c5-b686-65f214986c27
InfiniteWP Client <= 1.3.7 - PHP Object Injection
Critical
9e7a1116-2bf1-4d36-a091-e0d4a9d6e1c9
InfiniteWP Client <= 1.3.7 - Privilege Escalation
Medium
CVE-2014-9688
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.8 - Reflected Cross-Site Scripting
Medium
CVE-2014-9129
CM Download Manager <= 2.0.6 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2014-10394
Rich Counter < 1.2.0 - JavaScript Injection
Medium
CVE-2014-9176
InstaSqueeze Sexy Squeeze Pages (All Known Versions) - Cross-Site Scripting
Medium
CVE-2014-8809
WP Symposium <= 14.10 - Cross-Site Scripting
Medium
CVE-2014-8754
Ad Manager <= 1.1.2 - Open Redirection
Critical
CVE-2014-8810
WP Symposium < 14.11 - Authenticated SQL Injection
Medium
a06812c5-43db-4c32-a9fb-f7b86900a741
Contact Form DB <= 2.8.17 - Reflected Cross-Site Scripting
Low
CVE-2014-9174
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.1.2 - Cross-Site Scripting
Medium
CVE-2014-9177
HTML5 MP3 Player with Playlist <= 2.7.0 - Full Path Disclosure
Critical
cb2e9370-f50e-4792-99f6-4678e0256a56
Gallery Bank – WordPress Photo Gallery Plugin < 3.0.61 - Arbitrary File Upload
Critical
6ab975b0-4216-46df-bf5e-91e403728e5b
wpDataTables <= 1.5.3 - Arbitrary File Upload
Critical
CVE-2014-9735
Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Upload
Critical
CVE-2015-9499
Showbiz Pro Responsive Teaser WordPress Plugin <= 1.7.1 - Arbitrary File Upload
High
CVE-2014-9260
WordPress Download Manager <= 2.7.2 - Authenticated Arbitrary Options Update
Critical
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
High
CVE-2014-125091
Polls CP <= 1.0.1 - Authenticated SQL Injection
Critical
CVE-2014-9175
wpDataTables (Premium) <= 1.5.3 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.