Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMailUp newsletter sign-up form < 1.3.2 - Cross-Site Scripting
LeagueManager < 3.8.1 - SQL Injection
MailUp newsletter sign-up form < 1.3.3 - Cross-Site Scripting
podPress <= 8.8.10.17 - Cross-Site Scripting via playerID
Terillion Reviews < 1.2 - Stored Cross-Site Scripting
All-in-One Events Calendar < 1.10 - SQL Injection
Count per Day < 3.2.6 - Cross-Site Scripting
Caulk (Unknown Versions) - Full Path Disclosure
Events Manager <= 5.3.6 - Multiple Cross-Site Scripting
Google Alert and Twitter Plugin <= 3.1.5 - Multiple Vulnerabilities
Magn WP Drag And Drop Media Uploader <= 1.2.0 - Arbitrary File Upload
Comment Rating <= 2.9.32 - SQL Injection
Mingle Forum <= 1.0.33.3 - Stored Cross-Site Scripting
Mingle Forum <= 1.0.33.3 - SQL Injection
Scarlet (All Versions) - Cross-Site Scripting
Montezuma < 1.1.8 - Cross-Site Scripting
Smart Flv <= 1.0 - Cross-Site Scripting
WP-TopBar <= 3.04 - Cross-Site Scripting
Allure Real Estate Theme <= 0.1.1 - Reflected Cross-Site Scripting
Allure Real Estate Theme for Placester <= 0.1.1 - Cross-Site Scripting
Marekkis Watermark-Plugin <= 0.9.4 - Cross-Site Scripting
Responsive Logo Slideshow < 1.2 - Cross-Site Scripting
WP Easy Gallery <= 2.7 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.