Critical
8b783b94-7135-49c1-aff2-1c2ea24bbfcd
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
bb5178f4-356b-4352-96ca-500e49006f8a
ThemeBlvd Themes/Plugins (Various Versions) - Missing Authorization Checks
High
CVE-2014-8603
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution
Low
CVE-2014-5240
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
Medium
CVE-2011-3841
WP Symposium <= 11.11.26 - Cross-Site Scripting
Medium
CVE-2014-5337
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure
Critical
CVE-2014-4663
Ajax Search Lite < 3.11 - Remote Code Execution
Medium
CVE-2014-4572
Votecount For Balatarin <= 0.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2014-4583
WP-Contact <= 1.0 - Cross-Site Scripting
High
b2cea890-b131-47cd-9050-a484fb1895f6
5 Star <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2014-2839
GD Star Rating <= 1.9.22 - Blind SQL Injection
High
CVE-2014-2838
GD Star Rating <= 1.9.22 - Cross-Site Request Forgery
Medium
CVE-2014-1889
BuddyPress <= 1.9.1 - Authorization Bypass
High
6897a8fe-c32e-430a-847c-23d1add2355d
Various Orange themes (Various Unspecified Versions) - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2013-10027
Blogger Importer <= 0.5 - Cross-Site Request Forgery
Medium
CVE-2013-3250
WP Maintenance Mode <= 1.8.7 - Missing Authorization Checks & Cross-Site Request Forgery
Medium
CVE-2013-10030
WordPress Exit Box Lite <= 1.06 - Full Path Dislcosure
Medium
76b0c41c-c825-4ac2-8a7f-4b1a54f21f0b
Smart Start <= 1.0.8 - Cross-Site Scripting
High
CVE-2013-10023
Editorial Calendar <= 2.6 - Authenticated (Admin+) SQL Injection
Critical
64e125c7-3f1e-43ed-8655-e0fbb95bc84b
CStar Design WordPress Theme <= 4.9 - SQL Injection
Medium
bf852d93-6d56-46a2-aebc-b222b1b73fb1
GD Star Rating < 1.9.17 - Cross-Site Scripting
Critical
CVE-2012-4033
Zingiri Web Shop < 2.4.0 - Multiple Vulnerabilities
High
CVE-2011-5051
WP Symposium < 11.12.24 - Arbitrary File Upload
Medium
f34383c7-1d98-4f8a-aa43-542fe2d9a567
Starbox Voting <= 2.0.4 - Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.