Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersqTranslate <= 2.5.39 - Cross-Site Request Forgery
WordPress Core < 3.5.2 - Missing Authorization Checks
WordPress Core < 3.5.2 - Sensitive Information Disclosure
WordPress Core < 3.5.2 - Cross-Site Scripting
WordPress Core <= 3.5.1 - Denial of Service via wp-postpass cookie
WordPress Core < 3.5.2 - Server Side Request Forgery
WordPress Core < 3.5.2 - Cross-Site Scripting via Multiple Vectors
WordPress Core <= 3.5.1 - Content-Spoofing Attacks
WordPress Core < 3.5.2 - XXE Injection
Slash WP (All Versions) - Multiple Vulnerabilities
Ultimate WordPress Auction Plugin < 1.0.1 - Cross-Site Request Forgery
WordPress Gallery Plugin – NextGEN Gallery <= 1.9.12 - Arbitrary File Upload
JobRoller <= 1.7.4 - Reflected Cross-Site Scripting
Ambience (Unspecified Versions) - Cross-Site Scripting
WP Maintenance Mode <= 1.8.7 - Missing Authorization Checks & Cross-Site Request Forgery
AntiVirus < 1.1 - Full Path Disclosure
Exploit Scanner <= 1.3.3 - Full Path Disclosure
WordPress Exit Strategy <= 1.55 - Information Exposure
WordPress Exit Box Lite <= 1.0.6 - Cross-Site Request Forgery
WordPress Exit Strategy <= 1.55 - Cross-Site Request Forgery
WordPress Exit Box Lite <= 1.06 - Full Path Dislcosure
ADIF Log Search Widget <= 1.0f - Cross-Site Scripting
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.5.4 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.