High
f52d5c44-4a5e-4a45-b622-66aa4e509fd8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
f72de600-b9d8-4d91-9c80-f2df2a2ef435
onepagewebsite (Unknown Versions) - Full Path Disclosure
Medium
CVE-2012-10007
BuddyStream <= 3.6.2 - Reflected Cross-Site Scripting
Medium
114ff636-6b51-43a2-b2c8-19e01e94176f
Vithy (Unknown Versions) - Full Path Disclosure
Critical
ecd35d5a-5270-4132-bc62-d75da5141313
Floating Social Media Links < 1.4.3 - Remote File Inclusion via fsml-admin.js.php wpp parameter
Critical
43d1f708-58bd-4d42-b8dd-0c1247546577
Floating Social Media Links < 1.4.3 - Remote File Inclusion via fsml-hideshow.js.php wpp parameter
Critical
908dbe64-e214-4880-a85d-38df4c722a43
Dagda Theme <= 5.0 - Arbitrary File Upload
Critical
370fbe22-df48-4f64-ba7f-5ab98b908f58
Yvora - Premium WordPress Theme | Portfolio (Unspecified Version) - Arbitrary File Upload
Critical
8dfa65cb-3d16-471a-8464-b71510d65fd5
Toolbox <= 1.4 - SQL Injection
Medium
6dd6e04c-bac4-49c3-a934-7d3f43767684
Konzept (Unknown Version) - Cross-Site Scripting
Medium
0d50eda3-20d8-436b-968c-9d8eeccaa0c9
Sparky <= 1.0 - Cross-Site Scripting
Critical
64e125c7-3f1e-43ed-8655-e0fbb95bc84b
CStar Design WordPress Theme <= 4.9 - SQL Injection
Medium
0c0c698e-a5c2-473c-8dfb-31745b7d7c38
Predictive Search for WooCommerce <= 1.0.5 - Cross-Site Scripting
Medium
CVE-2012-6312
Video Lead Form < 0.6 - Cross-Site Scripting
Critical
3ea52e59-d81c-4a3f-953e-34f8214c01d8
Ads Box <= 1.0 - SQL Injection
Medium
CVE-2012-6313
Simple Gmail Login < 1.1.4 - Sensitive Information Disclosure
Critical
851daaab-4509-4a1e-b0bb-f9eda2b801c6
Malmonation (All Versions) - SQL Injection
Critical
d07b5377-ce5f-4faa-ac72-78f5175913c3
Magazine Basic (Unknown Versions) - SQL Injection
Critical
ae12f71d-0f53-4942-83a7-856633e665ca
Plg Novana Plugin (All Versions) - SQL Injection
Critical
580f5cd1-2cda-4e8e-81b5-36ce39ebd907
Zarzadzanie Kontem (Unknown Versions) - Arbitrary File Upload
Medium
401f5d57-ce3d-46c1-bfa9-c8fab99a7e31
MailPoet Newsletters (Previous) <= 2.1.6 - Cross-Site Scripting
Medium
CVE-2011-4618
Advanced Text Widget <= 2.0.1 - Cross-Site Scripting
Critical
187df8e0-80f0-4805-823b-80627b76db2a
Facebook Survey Pro <= 1.0 - SQL Injection
Medium
f618911f-fd03-41ec-a0e1-dba4aa7178ab
Post Views <= 2.6.1.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.