Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWP Support Plus Responsive Ticket System <= 4.0 - JavaScript Injection
post highlights 2.0 - 2.6 - Cross-Site Scripting
Database Backup for WordPress <= 2.2.4 - Missing Authorization
WP eCommerce <= 3.8.14.3 - Missing Authorization
Profile Builder <= 2.0.2 - Reflected Cross-Site Scripting
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 4.25 - Sensitive Data Exposure
Calendar Event Multi View < 1.0.2 - SQL Injection
Creative Contact Form < 1.0.0 - Arbitrary File Upload
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.3.58 - SQL Injection
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.3.58 - SQL Injection
NEX-Forms Lite – WordPress Contact Form builder < 3.4 - Cross-Site Scripting
Featured Comments < 1.2.5 - Cross-Site Request Forgery
Gallery Bank – WordPress Photo Gallery Plugin < 3.0.70 - Reflected Cross-Site Scripting
Contact Form Integrated With Google Maps 1.0 - 2.4 - Stored Cross-Site Scripting
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Directory Traversal
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
Easy Contact Form Solution <= 1.6 - Stored Cross-Site Scripting
cformsII <= 13.1 - Cross-Site Scripting
O2tweet <= 0.0.4 - Cross-Site Request Forgery
Cforms <= 10.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.