Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWordPress Gallery Plugin – NextGEN Gallery <= 2.1.15 - Authenticated (Admin+) Cross-Site Scripting
PowerPress <= 6.0.4 - Reflected Cross-Site Scripting
estrutura-basica (All Known Versions) - Path Traversal
Royal Slider Plugin < 3.2.7 - Cross-Site Scripting
Replyable – Subscribe to Comments and Reply by Email < 1.4.6 - Cross-Site Scripting
eshop <= 6.3.13 - Cross-Site Forgery Request and Reflected Cross-Site Scripting
Fast Secure Contact Form <= 4.0.37 - Cross-Site Scripting
MainWP Child <= 2.0.27 - Multiple Cross-Site Scripting
WP Symposium <= 15.8.1 - Reflected Cross-Site Scripting
SecureMoz Security Audit <= 1.0.5 - PHP Object Injection
WP Limit Login Attempts < 2.0.1 - SQL Injection
Gallery – Photo Albums Plugin < 1.3.47 - Cross-Site Scripting
Contact Form Generator : Creative form builder for WordPress <= 2.1.86 - Cross-Site Request Forgery
Memphis Documents Library <= 2.6.16 - Remote File Inclusion
Memphis Documents Library <= 2.6.16 - Local File Inclusion
WPML 2.9.3-3.2.6 - Cross-Site Scripting in Accept-Language Header
BJ Lazy Load < 1.0 - Remote File Inclusion via TimThumb
Testimonial Slider <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WatuPRO < 4.9.0.8 - Cross-Site Request Forgery
NextGen Gallery <= 2.1.9 - Cross-Site Scripting
CKEditor for WordPress <= 4.5.3 - Reflected Cross-Site Scripting
Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
sourceAFRICA <= 0.1.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.