Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
surveys <= 1.01.8 - Authenticated SQL Injection
Surveys <= 1.01.8 - SQL Injection
EELV Newsletter <= 4.6.0 - Cross-Site Request Forgery
EELV Newsletter < 4.6.1 - Cross-Site Scripting
WordPress Core < 4.7.5 - Mishandling Post Meta Values via XML-RPC
WordPress Core < 4.7.5 - Cross-Site Scripting via Customizer
MaxButtons <= 6.18 - Cross-Site Scripting
WP Live Chat Support <= 7.0.06 - Cross-Site Scripting
WordPress Core < 4.7.5 - Server-Side Request Forgery
WP Booking System – Booking Calendar < 1.4 - Cross-Site Scripting
WordPress Core < 4.7.5 - Authorization Bypass Allowing Post Meta Updates
WordPress Core < 4.7.5 - Cross-Site Request Forgery Filesystem Credential Update
WordPress Core < 4.7.5 - Stored Cross-Site Scripting via filenames
Ultimate Addons for WPBakery <= 3.16.11 - Cross-Site Scripting
Crafty Social Buttons < 1.5.8 - Cross-Site Scripting
Nelio AB Testing < 4.6.4 - Cross-Site Request Forgery
Extra Search by Joomlaboat - SQL Injection
Tracking Code Manager < 1.11.5 - Denial of Service
Tracking Code Manager < 1.11.5 - Cross-Site Scripting
MSMC Redirect After Comment <= 2.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
JQueryFileTree <= 2.1.5 - Directory Traversal
Download Monitor <= 1.9.6 - Missing Authorization
WordPress Facebook <= 1.0.13 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.