Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersYITH Maintenance Mode <= 1.1.4 - Reflected Cross-Site Scripting
wordpress vertical image slider plugin < 1.2 - Cross-Site Request Forgery
Simple Image Manipulator <= 1.0 - Remote File Download
Livefyre Comments 3 <= 4.1.4 - Stored Cross-Site Scripting
Content Grabber <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Admin Pack by SITE CASEIRO <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Database Sync < 0.5 - Reflected Cross-Site Scripting
The Holiday Calendar < 1.11.3 - Cross-Site Scripting
qTranslate <= 2.5.39 - Cross-Site Scripting
Email Before Download <= 3.4 - SQL Injection
Flickr Justified Gallery < 3.4.0 - Reflected Cross-Site Scripting
Hide My WP <= 4.51.1 - Cross-Site Scripting
Clean Login <= 1.5 - Reflected Cross-Site Scripting
Unite Gallery Lite < 1.5 - Cross-Site Request Forgery and SQL Injection
Unite Gallery Lite < 1.5 - SQL Injection
Music Store – WordPress eCommerce < 1.0.15 - Open Redirect
Unite Gallery Lite <= 1.4.6 - Cross-Site Request Forgery & Authenticated SQL Injection
SendPress Newsletters < 1.2 - Authenticated SQL Injection
WordPress Core < 4.2.3 - Authorization Bypass
SendPress Newsletters < 1.2 - Cross-Site Scripting
WordPress Core < 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy Social Icons <= 1.2.3.1 - SQL Injection
Responsive Slider – Image Slider – Slideshow for WordPress <= 2.8.6 - Authenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.