Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-10-06 CVE-2015-1000010 Improper Access Control vulnerability in Simple-Image-Manipulator Project Simple-Image-Manipulator 1.0
Remote file download in simple-image-manipulator v1.0 wordpress plugin
network
low complexity
simple-image-manipulator-project CWE-284
5.0
2016-10-06 CVE-2015-1000009 Improper Access Control vulnerability in Google-Adsense-And-Hotel-Booking Project Google-Adsense-And-Hotel-Booking 1.05
Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05
6.4
2016-10-06 CVE-2015-1000008 Information Exposure vulnerability in Mp3-Jplayer Project Mp3-Jplayer 2.3.2
Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2
network
low complexity
mp3-jplayer-project CWE-200
5.0
2016-10-06 CVE-2015-1000007 Improper Authorization vulnerability in Wptf-Image-Gallery Project Wptf-Image-Gallery 1.03
Remote file download vulnerability in wptf-image-gallery v1.03
network
low complexity
wptf-image-gallery-project CWE-285
5.0
2016-10-06 CVE-2015-1000006 Path Traversal vulnerability in Recent-Backups Project Recent-Backups 0.7
Remote file download vulnerability in recent-backups v0.7 wordpress plugin
network
low complexity
recent-backups-project CWE-22
5.0
2016-10-06 CVE-2015-1000005 Path Traversal vulnerability in Candidate-Application-Form Project Candidate-Application-Form 1.0
Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin
5.0
2016-10-06 CVE-2015-1000004 Cross-site Scripting vulnerability in Filedownload Project Filedownload 1.4
XSS in filedownload v1.4 wordpress plugin
4.3
2016-10-06 CVE-2015-1000002 Improper Input Validation vulnerability in Filedownload Project Filedownload 1.4
Open Proxy in filedownload v1.4 wordpress plugin
5.8
2016-10-06 CVE-2015-1000001 Unrestricted Upload of File with Dangerous Type vulnerability in Fast-Image-Adder Project Fast-Image-Adder 1.1
Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin
network
low complexity
fast-image-adder-project CWE-434
5.0
2016-10-06 CVE-2015-1000000 Unrestricted Upload of File with Dangerous Type vulnerability in Mailcwp Project Mailcwp 1.99
Remote file upload vulnerability in mailcwp v1.99 wordpress plugin
network
low complexity
mailcwp-project CWE-434
5.0