Critical
75699831-de38-4c3b-840d-82a04fc97048
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
f4d41f7f-f0c6-4e50-bf5f-37ee25415f43
Gallery Bank – WordPress Photo Gallery Plugin < 2.0.20 - Reflected Cross-Site Scripting
Medium
83fd4f00-e8a8-4a33-af6b-20ff539fbfeb
MoneyTheme (All Versions) - Cross-Site Scripting
Critical
e8021ef2-e1ce-442a-965a-b2628fe48964
Curvo Theme (All Known Versions) - Cross-Site Request Forgery and Arbitrary File Upload
Medium
e43482e1-7e11-49a6-bb44-0db421b51ed1
MobileChief – Mobile Site Builder <= 1.5.7 - Cross-Site Scripting
Critical
056d26da-6e43-4cc6-b2fd-13a5947a814e
SAICO <= 1.0.2 - Arbitrary File Upload
Critical
CVE-2013-4462
Portable phpMyAdmin <= 1.5.0 - Authentication Bypass
Critical
02fe4a33-d059-461c-a03f-b7306ce6193f
GeoPlaces <= 4 - Arbitrary File Upload
Critical
ea9ee672-76d3-4d6a-b309-cd0023ca6c0d
Daily Deal (Unknown Versions) - Arbitrary File Upload
Critical
9766a657-1cf2-448a-bd66-a27c0ebd8261
Payment Gateways Caller for WP e-Commerce < 0.1.1 - Local File Inclusion
High
37f704bf-82bc-44f7-8b3c-cbf117732aaf
Dailydeal by Templatic < = 3.0.10 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2013-6797
Blue Wrench Video Widget < 2.0.0 - Cross-Site Request Forgery and to Cross-Site Scripting
Critical
73115c27-86f1-4421-9fe5-bf5d8cf54d9f
WPLocalPlaces (Unknown Versions) - Arbitrary File Upload
Medium
dd112c38-e6c1-435c-b62d-8fab06e90eb6
videowall (All Versions) - Reflected Cross-Site Scripting
Critical
b8652b40-480c-4d53-b1c8-e1dcfbd8a4a4
AREA53 <= 1.0.5 - Arbitrary File Upload
Medium
CVE-2013-6281
dhtmlxSpreadsheet <= 2.0 - Cross-Site Scripting
Medium
6e3524a6-4f12-4640-96a0-da60afa0b770
Quick Paypal Payments < 3.1 - Cross-Site Scripting
Medium
e1eeabdb-f1c0-49c5-9234-8ff4eaa38087
WooCommerce <= 2.0.17 - Cross-Site Scripting
High
CVE-2013-2701
Social Sharing Toolkit <= 2.1.1 - Cross-Site Request Forgery
Medium
ee5af42d-71d8-4e65-bd74-55456480da8b
WP Image Resizer (Unspecified Version) - Cross-Site Scripting
Medium
b9985992-e64c-4292-9738-cd38fb44a6f0
Dexs PM System <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
5e49afbd-9038-4d1d-b545-4dc86bb1be61
Video Metabox <= 1.1 - Stored Cross Site Scripting
Medium
30b4b98e-c566-4249-85a4-bfb0b5d5ac5d
Finalist (All Versions) - Cross-Site Scripting
Medium
d0f5b9b7-2482-4f25-b50e-e2d9b3ef4902
SL User Create < 0.2.5 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.