Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
WordPress Core 2.2.1 - Backdoor
WordPress Core <= 2.1.1 - Cross-Site Scripting
WordPress Core <= 2.1.1 - Cross-Site Scripting
WordPress Core 2.1.1 - Supply Chain Compromise
WordPress Core < 2.09 - Cross-Site Scripting
WordPress Core <= 3.0.4 - Cross-Site Scripting
WordPress Core < 2.1 - Directory Traversal
WordPress Core < 2.1 - Denial of Service
WordPress Core < 2.1 - Full Path Disclosure
WordPress Core < 2.0.7 - SQL Injection
WordPress Core < 2.0.7 - Full Path Disclosure
WordPress Core 2.0.2 - 2.0.5 - Sensitive Information Disclosure
WordPress Core <= 2.0.5 - SQL Injection
WordPress Core <= 2.0.5 - Cross-Site Scripting
WordPress Core <= 2.0.5 - Cross-Site Request Forgery to Cross-Site Scripting
WordPress < 2.0.6 - Username Enumeration via Error Messages
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."
WordPress Core <= 2.0.4 - Denial of Service
WordPress Core <= 2.0.4 - Directory Traversal
Headway < 3.8.9 - Cross-Site Scripting
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security dec
WordPress Core < 2.0.5 - User Metadata Information Disclosure
Subscribe to Comments <= 2.0.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.