High
CVE-2014-5204
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2014-2053
WordPress Core <= 3.9.1 - XML External Entity (XXE) Weakness
Critical
094c5011-41f6-420b-b566-e77fd55d9011
Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload
Medium
CVE-2013-2698
Calendar <= 1.3.2 - Cross-Site Request Forgery
Critical
fa45d830-fa28-4d94-a6d5-2dc2b8456cf2
WordPress Automatic Plugin <= 2.0.3 - Cross-Site Request Forgery to SQL Injection
High
CVE-2013-2009
WP Super Cache <= 1.2 - Remote Code Execution
Medium
CVE-2011-5194
WHOIS <= 1.4.2.2 - Reflected Cross Site Scripting
Medium
f3e74fb9-edb5-4602-9aac-375701a82f84
Better WP Security <= 3.6.3 - Stored Cross-Site Scripting
Medium
f30af3c4-82be-40d5-be9f-82631b8f3ee2
Simple History <= 1.0.7 - Sensitive Information Disclosure
Medium
f0b25726-0b8e-4fce-a986-5f1e176da75a
Booking Calendar < 4.1.6 - Cross-Site Request Forgery
High
CVE-2012-5328
Mingle Forum <= 1.0.32.1 - SQL Injection
Critical
ee5acf1d-e405-4aa6-8355-b5aebbbb1d1d
WPtouch <= 3.4.2 - Arbitrary File Upload
Medium
eb99c1a0-a0c3-4a6e-84b1-4ced45015db4
Really Simple Facebook Twitter Share Buttons < 2.10.5 - Cross-Site Request Forgery
Medium
CVE-2013-5988
All in One SEO <= 2.0.3 - Cross-Site Scripting via Search Parameter
High
CVE-2012-5469
Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
Medium
CVE-2014-2675
WP HTML Sitemap <= 1.2 - Cross-Site Request Forgery
Medium
e6270944-31c0-4d6d-a23f-87fce37ff8b0
SyntaxHighlighter Evolved <= 3.1.9 - Cross-Site Scripting
High
CVE-2013-1636
Pretty Links Lite < 1.6.3 - Stored Cross-Site Scripting
Medium
CVE-2013-2694
WP Symposium <= 13.04 - Open Redirection
Medium
dac38b2e-4d38-4b16-b6a1-ed3c0561e7c2
WPtouch < 1.9.30 - Open Redirect
Medium
CVE-2013-3487
BulletProof Security <= .48.9 - Cross-Site Scripting
Medium
CVE-2013-2708
Content Slide <= 1.4.2 - Cross-Site Request Forgery
High
CVE-2013-3253
Xhanch – My Twitter <= 2.7.6 - Cross-Site Request Forgery
Medium
d67cd96b-6fec-44db-be50-395bed199e9b
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 2.1.6 - Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.