← Back

Web Dorado

web-dorado

27 CVEs • 18 products

Products (18)

Click to collapse
Toggle
Web Dorado Spider Video Player
web-dorado_spider_video_player
3 CVEs
Event Calendar Wd
event_calendar_wd
2 CVEs
Contact Form Maker
contact_form_maker
2 CVEs
Form Maker
form_maker
2 CVEs
Wd Instagram Feed
wd_instagram_feed
2 CVEs
Wp Form Builder
wp_form_builder
2 CVEs
Spidervplayer
spidervplayer
2 CVEs
Wdsocialwidgets
wdsocialwidgets
2 CVEs
Spider Facebook
spider_facebook
1 CVE
Spider Calendar
spider_calendar
1 CVE
Ecommerce Wd
ecommerce_wd
1 CVE
Spider Catalog
spider_catalog
1 CVE
Spider Event Calendar
spider_event_calendar
1 CVE
Gallery Wd
gallery_wd
1 CVE
Contact Form
contact_form
1 CVE
Backup Wd
backup-wd
1 CVE
Spidercatalog
spidercatalog
1 CVE
Wd Widgettwitter
wd_widgettwitter
1 CVE

CVEs (27)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-4352
1Web Dorado
1Web Dorado Spider Video Player
May 6, 2026
Jun 15, 2015
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.
CVE-2015-4351
1Web Dorado
1Web Dorado Spider Video Player
May 6, 2026
Jun 15, 2015
N/A· v4
N/A· v3
4.9 MEDIUM· v2
The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.
CVE-2015-4350
1Web Dorado
1Spider Catalog
May 6, 2026
Jun 15, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the authentication of administrators for requests that delete (1) products, (2) ratings,...Show more
Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the authentication of administrators for requests that delete (1) products, (2) ratings, or (3) categories via unspecified vectors.Show less
CVE-2015-2562
1Web Dorado
1Ecommerce Wd
May 6, 2026
Mar 20, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order,...Show more
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.Show less
CVE-2015-2196
1Web Dorado
1Spider Calendar
May 6, 2026
Mar 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a spiderbigcalendar_month action to wp-admin/admin-ajax.php.
CVE-2015-1582
1Web Dorado
1Spider Facebook
May 6, 2026
Feb 11, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the appid parameter in a registration ta...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the appid parameter in a registration task to the default URI or remote administrators to inject arbitrary web script or HTML via the (2) asc_or_desc, (3) order_by, (4) page_number, (5) serch_or_not, or (6) search_events_by_title parameter in (a) the Spider_Facebook_manage page to wp-admin/admin.php or a (b) selectpagesforfacebook or (c) selectpostsforfacebook action to wp-admin/admin-ajax.php.Show less
CVE-2014-8584
1Web Dorado
1Web Dorado Spider Video Player
May 6, 2026
Nov 4, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified...Show more
Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less