Medium
CVE-2013-5988
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2012-5469
Portable phpMyAdmin <= 1.3.0 - Authentication Bypass
Medium
dac38b2e-4d38-4b16-b6a1-ed3c0561e7c2
WPtouch < 1.9.30 - Open Redirect
Medium
CVE-2011-4562
Redirection <= 2.2.9 - Cross-Site Scripting
High
CVE-2014-4855
Polylang <= 1.5.1 - Cross-Site Scripting
Medium
CVE-2014-1888
BuddyPress <= 1.9.1 - Stored Cross-Site Scripting
Medium
CVE-2014-4588
Hot Files: File Sharing and Download Manager Plugin <= 1.0.0 - Cross-Site scripting
Medium
CVE-2013-0721
WP PHP Widget <= 1.0.2 - Full Path Disclosure
Critical
CVE-2013-2011
WP Super Cache < 1.3.2 - Remote Code Execution
Critical
CVE-2014-4725
MailPoet Newsletters <= 2.6.6 - Arbitrary File Upload
Medium
CVE-2013-10026
Mail Subscribe List <= 2.0.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2014-100007
HK Exif Tags <= 1.11 - Cross-Site Scripting
Medium
7d33594b-e7b7-4685-97c1-37a2fecc1b8a
Yoast SEO <= 1.4.6 - Missing Authorization
High
78914fef-6ab4-49b8-8c67-3a634759194c
Tinymce Thumbnail Gallery <= 1.0.7 - Local File Inclusion
Medium
7801d3e1-90aa-434d-ae3d-9f19670280c0
LayerSlider <= 4.6.1 - Path Traversal
Medium
CVE-2013-4954
Pie Register <= 1.30 - Multiple Cross-Site Scripting
High
4be5c7d7-47dd-42ee-9cde-9e9ad6276e41
LayerSlider <= 4.6.1 - Cross-Site Request Forgery
High
37053b53-8308-4e54-99c2-7616ed8cb379
Email Newsletter <= 8.0 - Sensitive Information Disclosure
High
3566292a-91c8-4cb9-a1d3-45669d69bfc3
Q and A <= 1.0.6.2 Cross-Site Request Forgery
High
327f645b-4990-4b5e-b39c-6c55ac4e66f0
WP Easy Gallery <= 2.7 - Cross-Site Request Forgery
Medium
CVE-2013-6837
PrettyPhoto Library (Multiple Plugins and Themes) <= 3.1.4 - DOM Cross-Site Scripting
High
10a54a3b-db6d-45c5-9280-7042ccc17ccd
Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting
Medium
CVE-2013-1407
Events Manager < 5.3.5 & Events Manager Pro < 2.2.9 - Cross-Site Scripting
Medium
CVE-2014-5337
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps < 2.0.2 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.