Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersSimple Ads Manager <= 2.9.4.116 - SQL Injection
NextGen Gallery <= 2.1.10 - Unrestricted File Upload
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery
mTouch Quiz <= 3.1.2 - Reflected Cross-Site Scripting
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery to Cross-Site Scripting
mTouch Quiz <= 3.1.2 - Stored Cross-Site Scripting
Welcart e-Commerce < 1.5.3 - SQL Injection
Admin Management Xtended <= 2.4.0 - Missing Authorization Checks
Link Log – external link click monitor < 2.1 - SQL Injection
YAWPP (Yet Another WordPress Petition Plugin) <= 1.2.2 - Cross-Site Scripting
Ninja Forms Contact Form <= 2.9.28 - Stored Cross-Site Scripting
Content text slider on post < 6.9 - Cross-Site Scripting
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Scripting
Cool Video Gallery <= 1.9 - Authenticated Command Injection
Breezing Forms <= 1.2.7.30 - SQL Injection
Ultimate Member <= 1.3.28 - Reflected Cross-Site Scripting
Role Scoper (Obsolete – Please install PublishPress Permissions) < 1.3.67 - Reflected Cross-Site Scripting
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Request Forgery
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Scripting via p_name parameter
Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting
Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection
Google Doc Embedder < 2.5.17 - SQL Injection
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.