Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersRhythmo <= 1.3.4 - Unauthenticated Local File Inclusion
Legrand <= 2.17 - Unauthenticated Local File Inclusion
WealthCo <= 2.18 - Unauthenticated Local File Inclusion
UberSlider Ultra <= 2.3 - Reflected Cross-Site Scripting
RexCoin <= 1.2.6 - Unauthenticated Local File Inclusion
Eject <= 2.17 - Unauthenticated Local File Inclusion
S.King <= 1.5.3 - Unauthenticated Local File Inclusion
Dermatology Clinic <= 1.4.3 - Unauthenticated Local File Inclusion
UberSlider MouseInteraction <= 2.3 - Reflected Cross-Site Scripting
Filmax <= 1.1.11 - Unauthenticated Local File Inclusion
Run Gran <= 2.0 - Unauthenticated Local File Inclusion
UberSlider PerpetuumMobile <= 2.3 - Reflected Cross-Site Scripting
EasyCart <= 5.8.13 - Authenticated (Contributor+) SQL Injection
UberSlider Classic <= 2.5 - Reflected Cross-Site Scripting
Miller <= 1.3.3 - Unauthenticated Local File Inclusion
Tiger Claw <= 1.1.14 - Unauthenticated Local File Inclusion
Sprout Clients <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Artrium <= 1.0.14 - Unauthenticated Local File Inclusion
MailArchiver <= 4.5.0 - Authenticated (Admininistrator+) SQL Injection via 'logid' Parameter
Japanized for WooCommerce <= 2.8.4 - Missing Authorization to Unauthenticated Paidy Order Manipulation
Electric Enquiries <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute
WP Accessibility <= 2.3.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute
Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.