Medium
CVE-2012-2401
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2012-6512
Organizer <= 1.2.1 - Path Disclosure
High
3fc5e9b3-a121-40f0-a7e8-32979254f52e
Register Plus Redux <= 4.3 - Cross-Site Scripting
Medium
CVE-2012-1786
Videopack (formerly Video Embed & Thumbnail Generator) <= 1.1 - Full Path Disclosure
High
CVE-2012-1785
Videopack (formerly Video Embed & Thumbnail Generator) < 2.0 - Remote Code Execution
Critical
CVE-2012-1011
AllWebMenus WordPress Menu Plugin <= 1.1.8 - Arbitrary File Upload
Critical
CVE-2012-1010
AllWebMenus WordPress Menu Plugin < 1.1.9 - Arbitrary File Upload
Medium
CVE-2012-5325
Shortcode Redirect <= 1.0.01 - Cross-Site Scripting
High
CVE-2012-5350
Pay With Tweet <= 1.1 - Authenticated SQL Injection
Medium
CVE-2012-5346
WP Live.php <= 1.2.1 - Cross-Site Scripting
Medium
CVE-2011-5104
WP eCommerce < 3.8.7.2 - Stored Cross-Site Scripting
High
CVE-2011-4646
WP-PostRatings <= 1.61 - SQL Injection
Critical
CVE-2012-1067
WP-RecentComments <= 2.0.7 - SQL Injection
Critical
CVE-2011-4106
TimThumb <= 1.33 - Remote File Download
Medium
CVE-2011-3128
WordPress Core < 3.1.3 - Sensitive Information Disclosure
High
CVE-2011-0759
WP-reCAPTCHA <= 2.9.8.2 - Multiple Cross-Site Request Forgery
High
CVE-2011-3818
WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure
Medium
CVE-2011-0641
StatPressCN <= 1.9.0 - Cross-Site Scripting
Medium
CVE-2010-4403
Register Plus <= 3.5.11 - Sensitive Information Disclosure
High
CVE-2010-4402
Register Plus <= 3.5.11 - Stored Cross-Site Scripting
Medium
CVE-2010-5297
WordPress Core < 3.0.1 - Missing Authorization
Critical
CVE-2010-2924
myLinksDump <= 1.2 - SQL Injection
High
CVE-2009-3890
WordPress Core <= 2.8.5 - Arbitrary File Upload
Medium
CVE-2009-4170
WP-Cumulus <= 1.20 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.