Search vulnerabilities

Expected end of text, found '–' (at char 41), (line:1, col:42)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,536

CVE-2015-9344

The link-log plugin before 2.1 for WordPress has SQL injection.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Perafox
Products
Link Log
CVE-2015-9340

The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Iptanus
Products
Wordpress File Upload
CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Cozmoslabs
Products
Profile Builder
CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Bestwebsoft
Products
Limit Attempts
CVE-2015-9331

The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Soflyy
Products
Wp All Import
CVE-2015-9330

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Soflyy
Products
Wp All Import