Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersPowerplay Gallery <= 3.3 - SQL Injection
Download ZIP Attachments <= 1.0 - Directory Traversal
Pont <= 1.5 - Arbitrary Options Update
Teardrop - Fullscreen Photography Theme | Portfolio <= 1.8.5 - Arbitrary Options Update
Vernissage <= 1.2.9 - Arbitrary Options Update
Simpolio - Fullscreen Portfolio & Blog HTML Theme <= 1.3.2 - Arbitrary Options Update
Email Newsletter <= 20.15 - Unauthenticated SQL Injection
WP Mobile Detector <= 3.2 - Stored Cross-Site Scripting
NewStatPress <= 1.0.6 - Reflected Cross-Site Scripting
Nextend Social Login and Register <= 1.5.5 - Reflected Cross-Site Scripting
Nextend Twitter Connect <= 1.5.1 - Reflected Cross-Site Scripting
WP Accurate Form Data <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery
Erident Custom Login and Dashboard <= 3.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Salem Theme <= 1.5.5 - DOM-based Cross-Site Scripting
Ultimate Member 1.2.98 - 1.2.997 - Reflected Cross-Site Scripting
WP-Stats < 2.52 - Cross-Site Request Forgery
Copy or Move Comments < 1.0.1 - Cross-Site Scripting and SQL Injection
Salient < 5.5.53 - DOM Cross-Site Scripting
Users To CSV <= 1.4.5 - Cross-Site Request Forgery
Altos Connect <= 1.3.0 - Cross-Site Scripting
WordPress Landing Pages <= 1.8.7 - Cross-Site Scripting
Zip Attachments <= 1.5 - Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.