Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersBeauty & Clean <= 1.0.8 - Cross-Site Request Forgery & Arbitrary File Upload
DZS Video Gallery <= 8.60 - Reflected Cross-Site Scripting
360 Product Rotation <= 1.2.0 - Unauthenticated Arbitrary File Upload
SP Projects & Document Manager <= 2.5.9.5 - Cross-Site Scripting
SP Projects & Document Manager <= 2.5.9.5 - SQL Injection
Ocim MP3 (All Versions) - Cross-Site Scripting
SP Projects & Document Manager <= 2.6.0.0 - Arbitrary File Upload
Realia <= 0.9.1 - Reflected Cross-Site Scripting
Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor
Adminer < 1.4.4 - Cross-Site Scripting
Bulk Delete <= 5.5.3 - Missing Authorization
Easy Digital Downloads <= 2.5.7 - PHP Object Injection
Shibboleth <= 1.6 - Reflected Cross-Site Scripting
Gravityforms <= 1.9.15.11 - Cross-Site Scripting
Forget About Shortcode Buttons <= 1.1.1 - Reflected Cross-Site Scripting
Goodnews – Responsive WordPress News/Magazine | News / Editorial <= 5.11.1 - Reflected Cross-Site Scripting
Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Sensitive Information Disclosure
Export WordPress Data with Advanced Filters < 1.2 - SQL Injection
Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Cross-Site Scripting via LaTeX markup within HTML elements
WP Ultimate Exporter < 1.1 - Reflected Cross-Site Scripting
Import WooCommerce < 1.1 - Reflected Cross-Site Scripting
WP Advanced Importer <= 2.1.1 - Reflected Cross-Site Scripting
CSV Import <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.