Critical
CVE-2011-4106
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2011-4568
FV Flowplayer Video Player <= 1.2.11 - Cross-Site Scripting
High
CVE-2011-5286
Social Slider < 7.4.2 - SQL Injection
Medium
4838c2ad-87e0-4140-81bb-7d39d7a704dc
eShop < 6.2.9 - Reflected Cross-Site Scripting
Critical
c466c0ff-d84b-4536-bea7-ada2a80aad15
WordPress Share Buttons Plugin – AddThis < 2.2.0 - Code Injection
High
CVE-2011-3127
WordPress Core < 3.1.3 - Clickjacking
Medium
CVE-2011-3128
WordPress Core < 3.1.3 - Sensitive Information Disclosure
High
CVE-2011-3130
WordPress Core <= 3.1.2 - SQL Injection
High
CVE-2011-3129
WordPress Core <= 3.1.2 - Arbitrary File Upload
Medium
CVE-2011-3126
WordPress Core < 3.1.3 - Username Enumeration
Medium
CVE-2011-3125
WordPress Core < 3.1.3 - Security Hardening
Medium
CVE-2011-3122
WordPress Core < 3.1.3 - Media Related Security Issue
Critical
CVE-2011-10033
is-human <= 1.4.2 - Unauthenticated Remote Code Execution
Medium
CVE-2011-1762
WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users
Critical
9095bf69-e682-48aa-b206-8bd2b6c2b170
Sermon Browser < 0.43.6 - SQL Injection
Medium
69a0262e-6061-4139-ac59-b1a13dd2f147
Sermon Browser < 0.43.6 - Cross-Site Scripting
Medium
CVE-2011-5270
WordPress Core < 3.0.6 - Incorrect Authorization Checks
Medium
8b7ab27f-566f-46f4-9c8e-aedfa3410dec
SocialGrid <= 2.4 - Cross-Site Scripting
High
CVE-2011-4957
WordPress Core < 3.1.1 - Denial of Service
Medium
CVE-2011-4956
WordPress Core <= 3.1 - Cross-Site Scripting
High
CVE-2011-1669
WP Custom Pages <= 0.5.0.1 - Path Traversal
Critical
CVE-2011-4342
BackWPup <= 1.7.1 - Remote File Inclusion
High
CVE-2011-0759
WP-reCAPTCHA <= 2.9.8.2 - Multiple Cross-Site Request Forgery
High
CVE-2011-0760
WP Related Posts <= 1.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.