Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWordPress Core < 4.0 - Missing Session Cookie Expiration
Oberliga Theme (All Versions) - SQL Injection
Appius Theme <= 1.0 - Full Path Disclosure
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - Arbitrary File Modification
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 3.1.0 - Arbitrary File Deletion
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 2.53 - SQL Injection
Grou Random Image Widget <= 1.18 - Full Path Disclosure
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 2.53 - Sensitive Information Disclosure
Clockstone <= 1.2 - Arbitrary File Upload
WordPress RokBox <= 2.13 - Abuse of Functionality
WordPress RokBox <= 2.13 - Cross-Site Scripting
WordPress RokBox <= 2.13 - Denial of Service
WordPress RokBox <= 2.13 - Sensitive Data Disclosure
WordPress RokBox <= 2.13 - Full Path Disclosure
WordPress RokBox <= 2.13 - Arbitrary File Upload
WordPress RokBox <= 2.13 - Content Spoofing
Welcart e-Commerce < 1.2.2 - Cross-Site Request Forgery
Welcart e-Commerce < 1.2.2 - Cross-Site Scripting
Knews Multilingual Newsletters < 1.2.6 - Cross-Site Request Forgery
onepagewebsite (Unknown Versions) - Full Path Disclosure
BuddyStream <= 3.6.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.