High
CVE-2011-1156
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2009-5065
feedparser Cross-site Scripting vulnerability
High
CVE-2011-4957
WordPress Core < 3.1.1 - Denial of Service
Medium
CVE-2011-4956
WordPress Core <= 3.1 - Cross-Site Scripting
High
CVE-2011-1669
WP Custom Pages <= 0.5.0.1 - Path Traversal
Critical
CVE-2011-4342
BackWPup <= 1.7.1 - Remote File Inclusion
High
CVE-2011-0759
WP-reCAPTCHA <= 2.9.8.2 - Multiple Cross-Site Request Forgery
High
CVE-2011-0760
WP Related Posts <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2011-5304
SodaHead Polls < 2.0.4 - Multiple Cross-Site Scripting
High
CVE-2011-5208
BackWPup – WordPress Backup Plugin < 1.4.1 - Directory Traversal
High
1e4d03f0-408c-47da-bae9-38614603f02b
SimpleDark <= 1.2.11 - Cross-Site Scripting
Medium
f34383c7-1d98-4f8a-aa43-542fe2d9a567
Starbox Voting <= 2.0.4 - Full Path Disclosure
Medium
f2e6f09e-0ebc-47e3-84f3-9aede2781f42
GD Star Rating <= 1.9.22 - Cross-Site Scripting
Medium
CVE-2011-5307
Photosmash Plugin < 1.0.5 - Cross-Site Scripting
Critical
CVE-2011-1047
WP Forum Server <= 1.6.5 - SQL Injection
Critical
CVE-2011-10041
Uploadify <= 1.0 - Arbitrary File Upload
High
CVE-2013-1916
User Photo <= 0.9.4 - Arbitrary File Upload
High
CVE-2011-0696
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site requ
Medium
CVE-2011-0697
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file u
Critical
CVE-2011-0698
Directory traversal in Django
Critical
CVE-2011-5308
CDN Vote < 0.4.2 - SQL Injection
Medium
CVE-2011-0701
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure
High
CVE-2011-3818
WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure
Medium
CVE-2011-0740
RSS Feed Reader <= 0.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.