Critical
560b175b-ce2a-4161-aa6b-cd11d1377314
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2014-125130
Google MP3 Player <= 1.0.11 - Unauthenticated Arbitrary File Read
Critical
cb2e9370-f50e-4792-99f6-4678e0256a56
Gallery Bank – WordPress Photo Gallery Plugin < 3.0.61 - Arbitrary File Upload
Critical
6ab975b0-4216-46df-bf5e-91e403728e5b
wpDataTables <= 1.5.3 - Arbitrary File Upload
Critical
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
High
CVE-2014-9038
WordPress Core < 4.0.1 - Server-Side Request Forgery
Medium
CVE-2014-8749
BulletProof Security < .51.1 - Server-Side Request Forgery
Critical
CVE-2014-8739
Creative Contact Form < 1.0.0 - Arbitrary File Upload
Critical
1833720c-e714-4ec5-9ebb-24a4612195d6
Work The Flow <= 2.3.1 - Arbitrary File Upload
Critical
86eb42de-a820-4ba7-99cb-03d068e208a9
Category and Page Icons <= 0.9.1 - Arbitrary File Upload and Deletion
Critical
7887e0a6-53bf-49c7-a7a6-7c65cec28cae
Refraction <= 1.3 - Multiple Vulnerabilities
High
47938357-7d51-4d62-a08c-4b2bf3f3a062
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
High
CVE-2014-5324
Frontend File Manager Plugin < 3.6 - Arbitrary File Upload
Critical
f188c032-6f36-45a9-9ca8-39bfe91c97d4
Konzept (Unkown Versions) - Arbitrary File Upload
High
fdfa2336-dda2-4945-9278-1a85f8b5f88b
Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI
Medium
9f70f3d2-c267-4802-9a54-4f64c4507dba
Urban City (All Versions) - Arbitrary File Download
High
bd563af4-b97f-4746-a5e9-8dc5dfda272e
Authentic <= 2.0.4 - Arbitrary File Download
High
416ab7d5-9f3b-4ccc-9a0f-bfe5d38b6f97
KenBurner Slider (All Versions) - Path Traversal
Medium
CVE-2014-2053
WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness
Critical
094c5011-41f6-420b-b566-e77fd55d9011
Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload
High
CVE-2013-2009
WP Super Cache <= 1.2 - Remote Code Execution
Critical
92298f2d-aced-4177-b6e8-36e153e9c930
Contact Form 7 <= 3.5.2 - Arbitrary File Upload
Critical
CVE-2013-7483
SlideDeck 2 <= 2.3.3 - Local/Remote File Inclusion
Medium
7801d3e1-90aa-434d-ae3d-9f19670280c0
LayerSlider <= 4.6.1 - Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.