Medium
CVE-2006-3390
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,401
Critical
CVE-2006-4028
WordPress Core < 2.0.4 - Privilege Escalation
High
CVE-2006-2667
WordPress Core < 2.0.3 - Remote Code Execution
Medium
CVE-2006-2702
WordPress Core < 2.0.3 - IP Address Spoofing
Medium
CVE-2006-2458
Libextractor multiple heap-based buffer overflows
High
CVE-2006-0985
WordPress Core <= 2.0.1 - Cross-Site Scripting
Medium
CVE-2006-1263
WordPress Core < 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2007-5105
WordPress Core < 2.0.2 - Cross-Site Scripting
High
CVE-2006-0986
WordPress Core < 2.0.2 - Sensitive Information Disclosure
Medium
CVE-2006-1796
WordPress Core < 2.0.1 - Cross-Site Scripting
High
CVE-2006-1012
WordPress Core <= 1.5.2 - SQL Injection
Medium
CVE-2005-10002
secure-files <= 1.1 - Directory Traversal
High
CVE-2005-2612
WordPress Core < 1.5.2 - Remote Code Execution
Medium
CVE-2005-2109
WordPress Core < 1.5.1.3 - Arbitrary Email Content Change
High
CVE-2005-2110
WordPress Core < 1.5.1.3 - Sensitive Information Disclosure
High
CVE-2005-2107
WordPress Core <= 1.5.1.2 - Cross-Site Scripting
High
CVE-2005-2108
WordPress Core < 1.5.1.3 - SQL Injection
Medium
CVE-2005-1102
WordPress Core <= 1.5 - Stored Cross-Site Scripting
High
CVE-2005-1810
WordPress Core < 1.5.1.2 - SQL Injection
High
CVE-2005-1687
WordPress Core < 1.5.1 - SQL Injection
Medium
CVE-2005-1688
WordPress Core < 1.5.1 - Full Path Disclosure
Medium
CVE-2004-1584
WordPress Core <= 1.2 - HTTP Response Splitting
Medium
CVE-2004-1559
WordPress Core < 1.2.1 - Cross-Site Scripting
High
CVE-2003-1598
WordPress Core < 0.72 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.