Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
Postman SMTP <= 1.7.2 - Reflected Cross-Site Scripting
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection
JoomRecipe - SQL Injection
Display Widgets < 2.7 - SEO Spam Injection (Hidden Functionality)
WordPress Shortcodes Plugin — Shortcodes Ultimate < 4.10.0 - Directory Traversal
Analytics Tracker <= 1.1.0 - Cross-Site Scripting
WP Rocket <= 2.10.3 - Local File Inclusion
Email Before Download <= 3.6 - SQL Injection
Email Before Download <= 3.6 - SMTP Header Injection
All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting
EventCalendar < 1.0.94 - Authenticated Cross-Site Scripting
Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
WordPress Download Manager <= 2.9.51 - Cross-Site Scripting
Loaded Databook of Tablib prone to python insertion resulting in command execution
WordPress Download Manager <= 2.9.49 - Reflected Cross-Site Scripting
WP-Members < 3.1.8 - Cross-Site Scripting
Joomla Payage - SQL Injection
Easy PayPal Buy Now Button <= 1.7.2 - Cross-Site Request Forgery to Cross-Site Scripting
RSVP and Event Management Plugin <= 2.3.7 - Cross-Site Scripting
Gift Certificate Creator <= 1.0 - Stored Cross-Site Scripting
WP Jobs < 1.5 - SQL Injection
WP Custom Fields Search <= 0.3.28 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.