Critical
CVE-2013-0724
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
Medium
CVE-2013-1409
CommentLuv < 2.92.4 - Reflected Cross-Site Scripting
Medium
3f937290-fa45-4ce0-84f0-a42c83cd3bdf
DT Chocolate <= 1.0 - Open Redirect
High
CVE-2013-1408
MailPoet Newsletters <= 2.2 - Multiple SQL Injections
Critical
58ea0c9c-f63d-4c31-b02e-a86d5fe732aa
Flash News (All Versions) - Multiple Vulnerabilities
Medium
41219c9d-a10d-4006-9edc-1387dfdc8b8d
yolink Search for WordPress < 2.6 - Reflected Cross-Site Scripting
Critical
b6cab377-0a8a-45d2-a966-4c7f100b9409
Portfolio Slideshow Pro <= 3.0 - SQL Injection
Critical
5c79d861-e2e8-4fca-883f-79401544b0b1
RLSWordPressSearch (All Versions) - SQL Injection
Critical
2d10f043-df2c-4e81-bd99-e478a2dca0cf
WordPress Shout Box Widget <= 2.0.2 - SQL Injection
Critical
CVE-2012-4919
WordPress Gallery Plugin <= 1.4 - Unauthenticated Remote File Inclusion
High
ebcbeb7c-eadb-4541-94f0-6e85f7f3e6a1
Homepage SlideShow <= 2.3 - Arbitrary File Upload
Critical
8f5fa529-4c6e-465e-a281-78ba74e5a718
Accordion (All Versions) - Arbitrary File Upload
Medium
CVE-2013-1464
Audio Player <= 2.0.4.5 - Cross-Site Scripting via playerID Parameter
Critical
c6a0811e-f02b-49d1-915e-cf7ac4b5e1f5
Power Zoomer <= 1.2 - Arbitrary File Upload
High
9acdbd48-8d38-4d75-b2b1-c993e25cf92a
Levo Slideshow <= 2.3 - Arbitrary File Upload
Critical
c978a252-1f77-4c8d-b51a-04ed3493ee34
Dynamic Font Replacement DFR4WP EN <= 1.3 EN - SQL Injection
Medium
ad12941f-8cbf-41c6-a261-b47075198d26
Sandbox <= 1.6.1 - Full Path Disclosure
Critical
a3160602-6522-478d-8a99-d097472d10ac
Sandbox <= 1.6.1 - Arbitrary File Upload
Critical
f0e77557-f377-4752-bc5b-ec00f2520150
Chocolate WP – Responsive Photography Theme (All Versions) - Remote File Inclusion
Medium
CVE-2013-0237
WordPress Core < 3.5.1 - Cross-Site Scripting
Medium
CVE-2013-0235
WordPress Core < 3.5.1 - Server-Side Request Forgery
Medium
CVE-2013-0236
WordPress Core < 3.5.1 - Stored Cross-Site Scripting
High
a644ac90-6cc4-495c-b880-4ebbc237bb57
Chocolate WP – Responsive Photography Theme (All Versions) - Denial of Service and Abuse of Functionality
Critical
a537f82c-5139-439e-817f-7fd0ece958bd
Chocolate WP – Responsive Photography Theme (All Versions) - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.