Medium
CVE-2014-125100
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2014-5199
WordPress File Upload < 2.4.2 - Cross-Site Request Forgery
Unrated
213
Joomla Multicalendar
High
CVE-2014-5190
SI CAPTCHA Anti-Spam < 2.7.6 - Reflected Cross-Site Scripting
High
CVE-2014-125095
Contact Form Plugin <= 3.81 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2018-17074
Feed Statistics < 4.0 - Open Redirect
Medium
CVE-2014-125103
BestWebSoft's Twitter <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
05d86f94-1a1c-42d6-b0db-e19c5cbd1766
PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin < 1.7.5 - Cross-Site Scripting
Unrated
208
JChatSocial - 2.2 and lower
High
CVE-2014-9033
WordPress Core < 4.0.1 - Cross-Site Request Forgery to Authentication Takeover
Medium
CVE-2014-5266
WordPress Core < 3.9.2 - Denial of Service via XML #2
Medium
CVE-2014-5205
WordPress Core < 3.9.2 - Brute Force of Cross-Site Request Forgery Tokens
Critical
CVE-2014-8363
WordPress Spreadsheet <= 0.62 - SQL Injection
High
CVE-2014-5203
WordPress Core < 3.9.2 - Deserialization via Widgets
Medium
CVE-2014-8364
WordPress Spreadsheet (wpSS) <= 0.62 - Cross-Site Scripting
Low
CVE-2014-5240
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
Low
CVE-2014-5265
WordPress Core < 3.9.2 - Denial of Service via XML
High
CVE-2014-5204
WordPress Core < 3.9.2 - Cross-Site Request Forgery Protection Bypass
Medium
CVE-2014-2053
WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness
Unrated
207
Watchful Client (watchful.li extension) - 1.9.0 and lower
Unrated
206
kunena
Critical
094c5011-41f6-420b-b566-e77fd55d9011
Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload
Medium
CVE-2013-2698
Calendar <= 1.3.2 - Cross-Site Request Forgery
Critical
fa45d830-fa28-4d94-a6d5-2dc2b8456cf2
WordPress Automatic Plugin <= 2.0.3 - Cross-Site Request Forgery to SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.