Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersFireStorm Shopping Cart eCommerce Plugin <= 2.07.02 - SQL Injection
Calendar < 1.3.8 - Reflected Cross-Site Scripting
YITH WooCommerce Compare <= 2.0.9 - Unauthenticated PHP Object Injection
Caldera Forms <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Post Grid <= 2.0.12 - Arbitrary File Deletion
Quotes Collection < 2.0.6 - Cross-Site Scripting
WassUp Real Time Analytics < 1.9.1 - Cross-Site Scripting
DW Question & Answer < 1.4.2.3 - Stored Cross-Site Scripting
W3 Total Cache <= 0.9.4 - Server-Side Request Forgery leading to Host Information Disclosure
GoDaddy Email Marketing < 1.1.4 - Cross-Site Request Forgery
WP Database Backup <= 4.3.5 - Cross-Site Request Forgery
InPost Gallery < 2.1.2.1 - Local File Inclusion
InPost Gallery <= 2.1.2 - Cross-Site Scripting
Pondol Carousel <= 1.0 - Reflected Cross-Site Scripting
Tera Charts <= 1.0 - Reflected Cross-Site Scripting
OneLogin SAML SSO <= 2.4.2 - Use of Vulnerable Component
CM Tooltip Glossary – Better SEO and UEX for your WP site <= 3.3.4 - Reflected Cross-Site Scripting
Simpel Reserveren 3 <= 3.5.2 - Reflected Cross-Site Scripting
Photoxhibit <= 2.1.8 - Reflected Cross-Site Scripting via gid
Indexisto <= 1.0.5 - Reflected Cross-Site Scripting
WHIZZ < 1.0.8 - Reflected Cross-Site Scripting
SAM Pro (Free Edition) < 1.9.7.69 & Simple Ads Manager <= 2.10.0.130 & SAM Pro Lite < 1.9.0.53 - Local/Remote File Inclusion
E Search <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.