Medium
05d86f94-1a1c-42d6-b0db-e19c5cbd1766
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2014-9033
WordPress Core < 4.0.1 - Cross-Site Request Forgery to Authentication Takeover
Medium
CVE-2014-5266
WordPress Core < 3.9.2 - Denial of Service via XML #2
Medium
CVE-2014-5205
WordPress Core < 3.9.2 - Brute Force of Cross-Site Request Forgery Tokens
Critical
CVE-2014-8363
WordPress Spreadsheet <= 0.62 - SQL Injection
High
CVE-2014-5203
WordPress Core < 3.9.2 - Deserialization via Widgets
Medium
CVE-2014-8364
WordPress Spreadsheet (wpSS) <= 0.62 - Cross-Site Scripting
Low
CVE-2014-5240
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
Low
CVE-2014-5265
WordPress Core < 3.9.2 - Denial of Service via XML
High
CVE-2014-5204
WordPress Core < 3.9.2 - Cross-Site Request Forgery Protection Bypass
Medium
CVE-2014-2053
WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness
Critical
094c5011-41f6-420b-b566-e77fd55d9011
Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload
Medium
CVE-2013-2698
Calendar <= 1.3.2 - Cross-Site Request Forgery
Critical
fa45d830-fa28-4d94-a6d5-2dc2b8456cf2
WordPress Automatic Plugin <= 2.0.3 - Cross-Site Request Forgery to SQL Injection
High
CVE-2013-2009
WP Super Cache <= 1.2 - Remote Code Execution
Medium
CVE-2011-5194
WHOIS <= 1.4.2.2 - Reflected Cross Site Scripting
Medium
f3e74fb9-edb5-4602-9aac-375701a82f84
Better WP Security <= 3.6.3 - Stored Cross-Site Scripting
Medium
f30af3c4-82be-40d5-be9f-82631b8f3ee2
Simple History <= 1.0.7 - Sensitive Information Disclosure
Medium
f0b25726-0b8e-4fce-a986-5f1e176da75a
Booking Calendar < 4.1.6 - Cross-Site Request Forgery
High
CVE-2012-5328
Mingle Forum <= 1.0.32.1 - SQL Injection
Critical
ee5acf1d-e405-4aa6-8355-b5aebbbb1d1d
WPtouch <= 3.4.2 - Arbitrary File Upload
Medium
eb99c1a0-a0c3-4a6e-84b1-4ced45015db4
Really Simple Facebook Twitter Share Buttons < 2.10.5 - Cross-Site Request Forgery
Medium
CVE-2013-5988
All in One SEO <= 2.0.3 - Cross-Site Scripting via Search Parameter
High
CVE-2012-5469
Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.