Critical
CVE-2015-2216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Critical
CVE-2012-1067
WP-RecentComments <= 2.0.7 - SQL Injection
Medium
CVE-2012-1068
WP-RecentComments <= 2.0.6 - Cross-Site Scripting
Critical
CVE-2012-1205
Relocate Upload < 0.20 - Remote File Inclusion
Critical
CVE-2011-3981
AllWebMenus WordPress Menu Plugin <= 1.1.3 - Remote File Inclusion
Critical
4624d197-db90-41ee-a3d5-a83a0dbf6b7c
Global Flash Gallery <= 0.15.1 - Arbitrary File Upload
Critical
CVE-2011-5216
SCORM Cloud For WordPress < 1.0.7 - SQL Injection
High
65b8e9b3-6078-4a78-86f9-7251c1978199
Eventify - Simple Events <= 1.7.f - SQL Injection via eventid
Critical
7867d651-dd15-4d91-a7ca-65f49cb94b65
Search Autocomplete < 1.0.9 - SQL Injection
Critical
CVE-2011-4106
TimThumb <= 1.33 - Remote File Download
Medium
CVE-2011-4568
FV Flowplayer Video Player <= 1.2.11 - Cross-Site Scripting
High
CVE-2011-5286
Social Slider < 7.4.2 - SQL Injection
Medium
4838c2ad-87e0-4140-81bb-7d39d7a704dc
eShop < 6.2.9 - Reflected Cross-Site Scripting
High
CVE-2011-2528
High severity vulnerability that affects Plone and Zope2
Critical
c466c0ff-d84b-4536-bea7-ada2a80aad15
WordPress Share Buttons Plugin – AddThis < 2.2.0 - Code Injection
Medium
CVE-2011-1949
Plone Cross-site Scripting vulnerability
High
CVE-2011-3127
WordPress Core < 3.1.3 - Clickjacking
Medium
CVE-2011-3128
WordPress Core < 3.1.3 - Sensitive Information Disclosure
High
CVE-2011-3130
WordPress Core <= 3.1.2 - SQL Injection
High
CVE-2011-3129
WordPress Core <= 3.1.2 - Arbitrary File Upload
Medium
CVE-2011-3126
WordPress Core < 3.1.3 - Username Enumeration
Medium
CVE-2011-3125
WordPress Core < 3.1.3 - Security Hardening
Medium
CVE-2011-3122
WordPress Core < 3.1.3 - Media Related Security Issue
Critical
CVE-2011-10033
is-human <= 1.4.2 - Unauthenticated Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.