Critical
CVE-2014-1929
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2014-1928
python-gnupg's shell_quote function does not properly escape characters
High
CVE-2014-1927
python-gnupg's shell_quote function does not properly quote strings
Critical
CVE-2014-8586
Calendar Event Multi View < 1.0.2 - SQL Injection
Critical
CVE-2014-8739
Creative Contact Form < 1.0.0 - Arbitrary File Upload
Critical
a9c7d539-2ea7-4f72-b0d2-6082e26918ce
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.3.58 - SQL Injection
Critical
4d3fd9b8-b9b7-4884-9188-6bf255058323
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.3.58 - SQL Injection
Medium
CVE-2014-7151
NEX-Forms Lite – WordPress Contact Form builder < 3.4 - Cross-Site Scripting
High
CVE-2014-10382
Featured Comments < 1.2.5 - Cross-Site Request Forgery
Medium
CVE-2014-8758
Gallery Bank – WordPress Photo Gallery Plugin < 3.0.70 - Reflected Cross-Site Scripting
High
CVE-2014-7238
Contact Form Integrated With Google Maps 1.0 - 2.4 - Stored Cross-Site Scripting
High
CVE-2014-8607
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
High
CVE-2014-8603
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution
Medium
CVE-2014-8606
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Directory Traversal
High
CVE-2014-8605
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure
High
CVE-2014-8604
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
Medium
CVE-2014-7240
Easy Contact Form Solution <= 1.6 - Stored Cross-Site Scripting
Medium
CVE-2014-10377
cformsII <= 13.1 - Cross-Site Scripting
Medium
CVE-2014-1830
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Medium
CVE-2014-1829
Exposure of Sensitive Information to an Unauthorized Actor in Requests
High
CVE-2014-9338
O2tweet <= 0.0.4 - Cross-Site Request Forgery
Medium
CVE-2014-10392
Cforms <= 10.1 - Cross-Site Scripting
Medium
CVE-2014-7182
WP Google Maps <= 6.0.26 - Reflected Cross-Site Scripting
Medium
CVE-2014-10393
cformsII <= 10.4 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.