Medium
4c5dd7a4-0e9c-4e1e-8385-2e76b7b9b02e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
Medium
06fee60a-e96c-49ce-9007-0d402ef46d72
Chocolate WP – Responsive Photography Theme (All Versions) - Cross-Site Scripting
Critical
9ae5b5f1-77a7-4626-a9b5-6f146c32a6db
WordPress File Uploader <= 1.1 - Arbitrary File Upload
High
938be2d0-1e56-42d5-874e-574e78a44932
Developer Formatter < 2013.0.1.41 - Cross-Site Request Forgery
Critical
CVE-2013-1400
WordPress Poll < 34.06 - SQL Injection
Critical
CVE-2013-1401
WordPress Poll <= 34.05 - SQL Injection
Critical
cf159a11-9490-4f79-a62d-c279cfe26108
Ripe HD FLV <= 1.1 - SQL Injection
Medium
28a7b80c-8282-4f5c-b442-d6bce9fda25d
Ripe HD FLV <= 1.1 - Full Path Disclosure
High
CVE-2012-4920
Forums < 1.4.4 - Directory Traversal
High
CVE-2012-4915
Google Doc Embedder < 2.5.4 - Directory Traversal
High
874130f0-7dc9-49fe-a7b0-e0be432799bd
Google XML Sitemaps Generator < 3.2.9 - Authenticated (Admin+) PHP Code Injection
High
8a5bcf8f-9aa0-4a78-b3a8-21571700ea8b
Spam Free WordPress <= 1.9.3 - Full Path Disclosure
Medium
7f7a8ee7-af69-4aff-abf7-6d69d920fe61
Spam Free WordPress <= 1.9.3 - IP Protection Bypass
High
031c2a61-3547-4c33-8ab8-c52585c8066a
OpenInviter for WordPress <= 1.7.0 - Sensitive Information Disclosure
Critical
e87d7ca0-6fa3-4ca3-b308-d47e1e2e6566
Eptonic <= 1.4 - Arbitrary File Upload
Critical
89620065-b961-49c9-a662-bee300b5da72
Lightspeed <= 1.1.2 - Arbitrary File Upload
Critical
06e90f64-f64e-4871-9106-1d7af02f13d2
Nuance <= 1.2 - Arbitrary File Upload
Critical
fe17abd8-9ee2-4b9c-a30b-68d95e341722
ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Upload
Critical
d0ace3b6-7941-43c6-b636-8f7b9d51da3e
Level Four Store Front < 8.1.15 - Arbitrary File Upload
High
CVE-2014-5465
Download Shortcode <= 0.2.3 - Directory Traversal
Low
CVE-2012-10025
Advanced Custom Fields <= 3.5.1 - Remote Code Execution via Remote File Inclusion
Critical
0b4b0cd0-dcc2-4790-8aeb-a304088dea3c
Xerte Online <= 0.35 - Arbitrary File Upload
High
CVE-2013-0736
Mingle Forum <= 1.0.34 - Cross-Site Request Forgery
Medium
f125a9d4-7399-47ae-9b5d-4cfe12c4c177
Sahifa <= 2.4.0 - Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.