Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersW3 Total Cache <= 0.9.2.4 - Insecure Cryptography to Sensitive Information Disclosure
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection
UpdraftPlus <= 1.9.63 and UpdraftPlus (paid) <= 2.9.63 - Cross-Site Scripting
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection
W3 Total Cache <= 0.9.2.4 - Sensitive Information Exposure
Coditor <= 1.1 - Remote Code Execution
W3 Total Cache <= 0.9.2.4 - Password Hash Extraction
15Zine | Magazine Newspaper Blog News WordPress Theme < 3.3.0 - Reflected Cross-Site Scripting
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
Team Showcase <= 1.22.15 - Object Injection
Discount Rules for WooCommerce <= 2.2.0 - Missing Authorization
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Team Showcase <= 1.22.15 - Object Injection
Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass
Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass
RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass
WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass
10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass
Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass
Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.