Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Ultimate Member <= 2.0.45 - Admin+ Stored Cross-Site Scripting
Form Maker by 10Web <= 1.13.2 - Authenticated SQL Injection
Drupal core - SA-CORE-2019-007
Ultimate Faqs <= 1.8.21 - Cross-Site Scripting
WPGraphQL <= 0.2.3 - Information Exposure
WPGraphQL <= 0.2.3 - Administrative User Creation
WPGraphQL <= 0.2.3 - Unauthenticated Comment Creation
Custom Field Suite <= 2.5.14 - Authenticated Cross-Site Scripting
Gravityforms <= 2.4.8 - Information Exposure
WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure
W3 Total Cache plugin <= 0.9.7.3 - Reflected Cross-Site Scripting
Virim <= 0.4 - PHP Object Injection
W3 Total Cache <= 0.9.7.3 - Improper Input Validation via openssl_verify
Carts Guru <= 1.4.5 - PHP Object Injection
WP Live Chat Support Pro <= 8.0.26 - Arbitrary File Upload
Travel Booking WordPress Theme < 2.7.8.4 - Cross-Site Scripting
Timely All-in-One Events Calendar <= 2.5.38 - Cross-Site Scripting
Path Traversal in Apache Camel
Advanced Woo Search <= 1.68 - Cross-Site Scripting
Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 - Reflected Cross-Site Scripting
User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload
RSForm! Pro - Other
Arbitrary File Overwrite in tar
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.