Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersCMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection
Stream <= 3.0.5 - Sensitive Data Exposure
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting
Gallery - Video Gallery and YouTube Gallery <= 1.7.01 - Stored Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more <= 2.0.31 - Stored Cross-Site scripting
Kento Post View Counter <= 2.8 - SQL Injection
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting
WP Fastest Cache <= 0.8.5.7 - Local File Inclusion
Caldera Forms – More Than Contact Forms < 1.4.0 - Sensitive Information Disclosure
WP Fastest Cache <= 0.8.5.7 - Missing Authorization
Brafton < 3.4.8 - Reflected Cross-Site Scripting
Image Gallery - Responsive Photo Gallery <= 1.9.57 - Cross-Site Request Forgery
Fluid Responsive Slideshow < 2.2.7 - Reflected Cross-Site Scripting
Fluid Responsive Slideshow < 2.2.7 - Cross-Site Request Forgery
Fluid Responsive Slideshow < 2.2.7 - Cross-Site Request Forgery
WP-EMail < 2.67.2 - SQL Injection
WP Editor < 1.2.6 - Cross-Site Request Forgery
BulletProof Security <= .53.3 - Authenticated Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall <= 4.15.17 - Cross-Site Scripting
Crayon Syntax Highlighter < 2.8.4 - Cross-Site Scripting
Nelio AB Testing < 4.5.0 - Directory Traversal
Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.