Category
Web / CMS
26,715 known vulnerabilities.
1,140 results · Clear filters · Feed
-
Unscored —CVE-2015-3986 Public exploit
Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordP…
-
Unscored —CVE-2015-3301 Public exploit
Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce…
-
Unscored —CVE-2015-1494 Public exploit
The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote att…
-
Unscored —
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitr…
-
Unscored —CVE-2014-100003 Public exploit
SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wo…
-
Unscored —CVE-2014-10013 Public exploit
SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to…
-
Unscored —CVE-2014-9094 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Vid…
-
Unscored —CVE-2014-5200 Public exploit
SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute …
-
Unscored —CVE-2014-5189 Public exploit
SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attacker…
-
Unscored —CVE-2013-1765 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote …
-
Unscored —CVE-2014-2579 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers…
-
Unscored —CVE-2011-5265 Public exploit
Cross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress…
-
Unscored —CVE-2012-6312 Public exploit
Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject …
-
Unscored —CVE-2011-5207 Public exploit
Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before …
-
Unscored —CVE-2012-5229 Public exploit
Cross-site scripting (XSS) vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows r…
-
Unscored —CVE-2011-4803 Public exploit
SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute …
-
Unscored —CVE-2011-4673 Public exploit
SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to ex…
-
Unscored —CVE-2011-0005 Public exploit
Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attack…
-
Unscored —CVE-2010-3977 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugi…
-
Unscored —
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly o…
-
Unscored —CVE-2008-7216 Public exploit
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files w…
-
Unscored —CVE-2008-7040 Public exploit
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows rem…
-
Unscored —CVE-2009-2396 Public exploit
PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress …
-
Unscored —CVE-2008-6088 Public exploit
SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2008-4625 Public exploit
SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows …
-
Unscored —CVE-2008-4616 Public exploit
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-s…
-
Unscored —CVE-2008-2629 Public exploit
SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-2510 Public exploit
SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to exe…
-
Unscored —CVE-2008-1982 Public exploit
SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote…
-
Unscored —CVE-2008-1646 Public exploit
SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to e…
-
Unscored —CVE-2008-1540 Public exploit
SQL injection vulnerability in the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote att…
-
Unscored —
PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for Word…
-
Unscored —CVE-2008-1061 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote a…
-
Unscored —
Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote …
-
Unscored —CVE-2008-0939 Public exploit
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow r…
-
Unscored —CVE-2008-0810 Public exploit
SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbit…
-
Unscored —CVE-2008-0683 Public exploit
SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress a…
-
Unscored —CVE-2008-0691 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for …
-
Unscored —CVE-2008-0616 Public exploit
SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote au…
-
Unscored —CVE-2008-0507 Public exploit
SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute a…