Critical
CVE-2012-5318
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Critical
CVE-2012-3576
IDB Ecommerce (wpStoreCart 5) < 2.5.30 - Arbitrary File Upload
Medium
CVE-2012-1786
Videopack (formerly Video Embed & Thumbnail Generator) <= 1.1 - Full Path Disclosure
High
CVE-2012-1785
Videopack (formerly Video Embed & Thumbnail Generator) < 2.0 - Remote Code Execution
High
CVE-2011-5082
s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site Scripting
High
CVE-2012-10009
404like <= 1.0 - SQL Injection
Critical
c77619cd-8d14-42b9-a536-cf39c50e714a
Front End Upload < 0.5.4 - Arbitrary File Upload
High
CVE-2012-5229
Slideshow Gallery <= 1.1.4 - Cross-Site Scripting
Critical
CVE-2012-0934
Theme Tuner < 0.8 - Remote File Inclusion
Critical
CVE-2012-1125
Kish Guest Posting <= 1.1 - Arbitrary File Upload
Critical
CVE-2012-1011
AllWebMenus WordPress Menu Plugin <= 1.1.8 - Arbitrary File Upload
Critical
CVE-2012-1010
AllWebMenus WordPress Menu Plugin < 1.1.9 - Arbitrary File Upload
Medium
CVE-2012-6527
My Calendar < 1.10.5 - Cross-Site Scripting
Medium
CVE-2012-5325
Shortcode Redirect <= 1.0.01 - Cross-Site Scripting
Medium
CVE-2012-0898
myEASYbackup < 1.0.9 - Directory Traversal
High
CVE-2012-0896
Count per Day <= 3.1 - Arbitrary File Download
Medium
CVE-2012-6499
Age Verification <= 0.4 - Open Redirect
Medium
CVE-2012-0901
YouSayToo auto-publishing plugin <= 1.0 - Cross-Site Scripting
Medium
CVE-2012-5349
Pay With Tweet <= 1.1 - Cross-Site Scripting
Medium
CVE-2011-5192
Pretty Link Lite < 1.5.6 - Cross-Site Scripting
Critical
8ddf6964-e0e7-4093-8aea-ac33f4214122
Blaze Slideshow <= 2.4 - Arbitrary File Upload
High
CVE-2012-5350
Pay With Tweet <= 1.1 - Authenticated SQL Injection
Medium
CVE-2012-0287
WordPress Core <= 3.3 - Cross-Site Scripting
Medium
CVE-2012-5346
WP Live.php <= 1.2.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.