Critical
02fe4a33-d059-461c-a03f-b7306ce6193f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
ea9ee672-76d3-4d6a-b309-cd0023ca6c0d
Daily Deal (Unknown Versions) - Arbitrary File Upload
Critical
9766a657-1cf2-448a-bd66-a27c0ebd8261
Payment Gateways Caller for WP e-Commerce < 0.1.1 - Local File Inclusion
High
37f704bf-82bc-44f7-8b3c-cbf117732aaf
Dailydeal by Templatic < = 3.0.10 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2013-6797
Blue Wrench Video Widget < 2.0.0 - Cross-Site Request Forgery and to Cross-Site Scripting
Critical
73115c27-86f1-4421-9fe5-bf5d8cf54d9f
WPLocalPlaces (Unknown Versions) - Arbitrary File Upload
Medium
dd112c38-e6c1-435c-b62d-8fab06e90eb6
videowall (All Versions) - Reflected Cross-Site Scripting
Critical
b8652b40-480c-4d53-b1c8-e1dcfbd8a4a4
AREA53 <= 1.0.5 - Arbitrary File Upload
Medium
CVE-2013-6281
dhtmlxSpreadsheet <= 2.0 - Cross-Site Scripting
Medium
6e3524a6-4f12-4640-96a0-da60afa0b770
Quick Paypal Payments < 3.1 - Cross-Site Scripting
Medium
e1eeabdb-f1c0-49c5-9234-8ff4eaa38087
WooCommerce <= 2.0.17 - Cross-Site Scripting
High
CVE-2013-2701
Social Sharing Toolkit <= 2.1.1 - Cross-Site Request Forgery
Medium
ee5af42d-71d8-4e65-bd74-55456480da8b
WP Image Resizer (Unspecified Version) - Cross-Site Scripting
Medium
b9985992-e64c-4292-9738-cd38fb44a6f0
Dexs PM System <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
5e49afbd-9038-4d1d-b545-4dc86bb1be61
Video Metabox <= 1.1 - Stored Cross Site Scripting
Medium
30b4b98e-c566-4249-85a4-bfb0b5d5ac5d
Finalist (All Versions) - Cross-Site Scripting
Medium
d0f5b9b7-2482-4f25-b50e-e2d9b3ef4902
SL User Create < 0.2.5 - Information Disclosure
Medium
CVE-2013-5978
Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Scripting
Critical
CVE-2013-6243
WordPress Landing Pages < 1.2.3 - SQL Injection
Critical
e57f7912-4af3-4dcb-b267-afec1c373b00
Wp-ImageZoom <= 1.0.7 - SQL Injection
Medium
CVE-2013-10027
Blogger Importer <= 0.5 - Cross-Site Request Forgery
Critical
81354461-70a9-4a5d-9a75-1f2445f7e8aa
WPRealty <= 2.9.1 - Time-Based Blind SQL Injection
Critical
a22932d8-14d4-43a1-86ba-7afadc0bec1a
Woopra Analytics Plugin < 1.4.3.2 - Remote Code Execution
High
d951e6b4-986a-400a-ab28-066a4ea5cbca
Quick Contact Form < 6.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.