High
390ee957-f06f-4952-b740-4578c130925f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
5804da94-1dee-47f8-930b-c5413d5506b9
Direct Download for Woocommerce < 1.16 - Local File Inclusion
Medium
CVE-2017-18576
Event Notifier <= 1.2.0 - Cross-Site Scripting
Medium
CVE-2017-18536
Stop User Enumeration <= 1.3.7 - Cross-Site Scripting
Medium
CVE-2017-18612
WP Whois Domain <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-10892
Chained Quiz Plugin < 1.0 - Cross-Site Scripting
High
CVE-2017-5491
WordPress Core < 4.7.1 - Authorization Bypass
Medium
CVE-2017-5488
WordPress Core < 4.7.1 - Cross-Site Scripting via Name and Version Header of Plugin
Medium
CVE-2017-5490
WordPress Core < 4.7.1 - Stored Cross-Site Scripting via theme directory name
High
CVE-2017-5489
WordPress Core < 4.7.1 - Cross-Site Request Forgery via Uploading Flash File
High
CVE-2017-5492
WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing
Medium
CVE-2017-5487
WordPress Core < 4.7.1 - Information Disclosure
Medium
CVE-2017-5493
WordPress Core < 4.7.1 - Weak Multi-Site Activation Key for User and Site Signup
High
a646a582-7174-4172-a193-c1606c43e6a5
Responsive Poll < 1.7.6 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
cadd47e9-1d5b-4f04-8421-7707dad53ea6
Google Forms <= 0.90 - Unauthenticated PHP Object injection
Medium
e7d4830b-f60a-4556-b40f-1bf9d5a296ad
Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses
Medium
CVE-2017-1000226
Stop User Enumeration plugin <1.3.9 - User Enumeration
Critical
f31bf9cd-fbf3-4f7a-bddd-ddd44c899710
WordPress Ad Widget <= 2.11.0 - Local File Inclusion
Medium
CVE-2017-6514
WordPress Core < 4.7.2 - Path Disclosure
Medium
9d2345d2-0bcf-46fc-a857-0ec10a1b1c26
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure
High
CVE-2016-10927
Nelio AB Testing < 4.5.11 - Server-Side Request Forgery
Critical
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
High
57837060-433f-471c-9413-6d9b95b69f2a
Image Slider < 1.1.90 - Arbitrary File Deletion
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.