Critical
7d8dcf85-9009-4788-9a12-7f2656aa5595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
Medium
e2f57c50-f6d1-4583-a75e-17c543ed7fa6
Pinpoint Booking System – #1 WordPress Booking Plugin <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2013-4944
BuddyPress Extended Friendship Request < 1.0.2 - Cross-Site Scripting
Unrated
141
k2 - Open Folder Permissions
Critical
60f63cdc-9c19-4f6c-a555-519bdb61ce6d
RokMicroNews <= 1.5 - Multiple Vulnerabilities
Medium
CVE-2013-4693
Xorbin Digital Flash Clock < 1.0 - DOM Cross-Site Scripting
High
CVE-2013-3251
qTranslate <= 2.5.39 - Cross-Site Request Forgery
Unrated
140
Unite Horizontal Carousel
Medium
CVE-2013-2200
WordPress Core < 3.5.2 - Missing Authorization Checks
Medium
CVE-2013-2203
WordPress Core < 3.5.2 - Sensitive Information Disclosure
Medium
CVE-2013-2205
WordPress Core < 3.5.2 - Cross-Site Scripting
Medium
CVE-2013-2173
WordPress Core <= 3.5.1 - Denial of Service via wp-postpass cookie
Medium
CVE-2013-2199
WordPress Core < 3.5.2 - Server Side Request Forgery
Medium
CVE-2013-2201
WordPress Core < 3.5.2 - Cross-Site Scripting via Multiple Vectors
Medium
CVE-2013-2204
WordPress Core <= 3.5.1 - Content-Spoofing Attacks
Medium
CVE-2013-2202
WordPress Core < 3.5.2 - XXE Injection
Critical
5432bdd1-9b56-4f74-a468-011f942bdd89
Slash WP (All Versions) - Multiple Vulnerabilities
High
c01bce24-3563-40bd-83c5-8d54bd622151
Ultimate WordPress Auction Plugin < 1.0.1 - Cross-Site Request Forgery
Critical
CVE-2013-3684
WordPress Gallery Plugin – NextGEN Gallery <= 1.9.12 - Arbitrary File Upload
Medium
6b28908b-ffad-46d5-b6de-6b9c7bbe0134
JobRoller <= 1.7.4 - Reflected Cross-Site Scripting
Medium
971d06e2-29dc-424d-b20e-8ec34990014d
Ambience (Unspecified Versions) - Cross-Site Scripting
Medium
CVE-2013-3250
WP Maintenance Mode <= 1.8.7 - Missing Authorization Checks & Cross-Site Request Forgery
High
2d49fa2d-0625-40a4-b3dd-13679b806bc1
AntiVirus < 1.1 - Full Path Disclosure
Unrated
281
Master Password
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.