High
CVE-2014-2598
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2014-4589
WP Silverlight Media Player <= 0.8 - Cross-Site Scripting
Medium
CVE-2014-4846
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 2.5 - Cross-Site Scripting
Critical
08c14611-c785-484d-9fdf-7d71c39f63df
Global Flash Gallery <= 0.15.1 - SQL Injection
Medium
08bebfbd-08f4-45d9-9570-46f5c848afca
User Meta – User Profile Builder and User management plugin 1.1.1 - Arbitrary File Upload
Medium
0753e172-3ff7-42a9-8651-d12573406d11
WP eCommerce <= 3.8.9 - Cross-Site Scripting
Critical
05a81b0e-2d25-44b5-b791-5b2aed94bbab
MyFTP <= 1.1 - SQL Injection
High
01f0b785-418e-468c-b9f8-53cd46aca881
Mingle Forum < 1.0.34 - Unauthenticated SQL Injection
High
CVE-2014-4664
Wordfence Security – Firewall & Malware Scan <= 5.1.3 - Cross-Site Scripting
High
CVE-2014-9099
WhyDoWork AdSense <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2014-9100
WhyDoWork AdSense <= 1.2 - Reflected Cross-Site Scripting
Critical
CVE-2014-5189
Lead Octopus Power < 1.1.1 - SQL Injection
Critical
CVE-2014-5200
FBGorilla (All Versions) - SQL Injection
Medium
CVE-2014-5337
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure
Critical
CVE-2014-9097
WORDPRESS VIDEO GALLERY < 2.6 - SQL Injection
Medium
CVE-2014-9098
WORDPRESS VIDEO GALLERY <= 2.5 - Cross-Site Scripting
Medium
CVE-2014-10386
WP Live Chat Support < 4.1.0 - JavaScript Code Injection
Unrated
205
youtube gallery
Critical
CVE-2014-5014
Flash Uploader <= 3.1.2 - Arbitrary Command Execution
High
CVE-2014-9012
Backup and Restore WordPress – Backup Plugin <= 1.9 - Sensitive Information Disclosure
Medium
CVE-2014-10380
Profile Builder – User Profile & User Registration Forms < 1.1.66 - Cross-Site Scripting
Medium
CVE-2014-5202
Compfight < 1.5 - Reflected Cross-Site Scripting
High
ec5fa360-6fff-46f5-8221-4b28a6db3e73
JSON REST API <= 1.1 - Potential Cross-Site Request Forgery Bypass
Medium
CVE-2014-8622
Compfight < 1.5 - Cross-Site Scrpting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.