Critical
CVE-2017-20066
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
f321b8f6-0712-4932-b861-b208debb368f
VaultPress <= 1.8.6 - Remote Code Execution
Critical
CVE-2017-1002002
Webapp builder 2.0 - Arbitrary File Upload
Medium
CVE-2017-1002000
How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorization
High
37052cb9-8479-4004-9161-65f37028ae10
Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
CVE-2017-6104
Wordpress Plugin Mobile App Native 3.0 <= 3.0 - Arbitrary File Upload
High
CVE-2017-18585
Posts in Page <= 1.2.4 - Authenticated Directory Traversal leading to Local File Inclusion
High
db9cd10e-90c1-48b2-8760-d5fc501fb3ba
Javo Spot < 3.0.0 - Directory Traversal
Critical
5804da94-1dee-47f8-930b-c5413d5506b9
Direct Download for Woocommerce < 1.16 - Local File Inclusion
High
CVE-2017-5491
WordPress Core < 4.7.1 - Authorization Bypass
Critical
f31bf9cd-fbf3-4f7a-bddd-ddd44c899710
WordPress Ad Widget <= 2.11.0 - Local File Inclusion
High
CVE-2016-10927
Nelio AB Testing < 4.5.11 - Server-Side Request Forgery
Critical
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2016-15033
Delete All Comments <= 2.0 - Arbitrary File Upload
High
CVE-2016-10926
Nelio AB Testing < 4.5.9 - Server Side Request Forgery
Medium
CVE-2016-20064
WP Vault <= 0.8.6.6 - Local File Inclusion
High
CVE-2016-6565
NextGen Gallery <= 2.1.56 - Remote File Inclusion
High
9373c82d-15a8-495a-8290-1b85c096f7e5
W3 Total Cache <= 0.9.4.1 - Weak validation of Amazon SNS push messages
High
b09c6da0-14d8-4e44-95bd-b5b6b0df97e9
W3 Total Cache <= 0.9.4 - Server-Side Request Forgery leading to Host Information Disclosure
Critical
19f737a8-21e6-49d3-95b9-24fb6e5d7af7
InPost Gallery < 2.1.2.1 - Local File Inclusion
Medium
CVE-2016-1000149
Simpel Reserveren 3 <= 3.5.2 - Reflected Cross-Site Scripting
High
730a3cde-bcbd-4d60-80bb-3944cc5386e5
SAM Pro (Free Edition) < 1.9.7.69 & Simple Ads Manager <= 2.10.0.130 & SAM Pro Lite < 1.9.0.53 - Local/Remote File Inclusion
Medium
CVE-2016-4029
WordPress Core < 4.5 - Server-Side Request Forgery
Medium
0a49c8df-0524-41af-b095-b5953e6f68d8
iThemes Security <= 5.6.1 - Sensitive Information Exposure via Diff Response
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.