Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP-Matomo Integration (WP-Piwik) < 1.0.11 - Unauthenticated Stored Cross-Site Scripting
404 to 301 <= 2.3.0 - Unauthenticated Stored Cross-Site Scripting
WordPress Zero Spam <= 2.1.1 - SQL Injection
CYSTEME Finder <= 1.3 - Arbitrary File Upload/Read
Mail Masta <= 1.0 - Local File Inclusion
Akal - Multipurpose WordPress Theme (All Versions) - Reflected Cross-Site Scripting
WordPress Core <= 4.5.3 - Denial of Service
CampTix Event Ticketing < 1.5 - Cross-Site Scripting
WordPress Core < 4.6 - Authorization Bypass
WordPress Core < 4.6 - Cross-Site Request Forgery
Ninja Forms Contact Form <= 2.9.55.1 - Authenticated SQL Injection
Ajax Load More < 2.11.2 - Local File Inclusion
Photo Gallery by Supsystic <= 1.8.8 - Cross-Site Request Forgery
Google Maps <= 2.1.3 - Reflected Cross-Site Scripting
Email Users < 4.8.4 - Cross-Site Request Forgery
Link Library <= 5.9.12.29 - Reflected Cross-Site Scripting
LoginWP < 2.9.1 - Cross-Site Scripting
Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object injection
FormBuilder < 1.08 - Cross-Site Request Forgery
Add From Server <= 3.3.1 - Cross-Site Request Forgery
Count per Day < 3.5.5 - Unauthenticated Stored Cross-Site Scripting
WP Multiple Meta Box <= 1.0.0 - SQL Injection
Events Made Easy <= 1.6.20 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.