Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
DTracker <= 1.5 - SQL Injection
DTracker <= 1.5 - Authorization Bypass
DTracker <= 1.5 - SQL Injection
MultiTier - SQL Injection
BookLibrary - SQL Injection
MediaLibrary - SQL Injection
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.30 - HTML Injection
Wp2android <= 1.1.4 - Arbitrary File Upload
Mobile App Builder by WapPress <= 1.05 - Arbitrary File Upload
Street Guesser - SQL Injection
UserExtranet - SQL Injection
JO Facebook gallery - SQL Injection
WordPress Core < 4.7.3 - Arbitrary File Deletion
WordPress Core < 4.7.3 - Cross-Site Scripting via Taxonomy names
WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This
WordPress Core < 4.7.3 - Cross-Site Scripting via Media Metadata
WordPress Core < 4.7.3 - Bypass URL Validation
WordPress Core < 4.7.3 - Authenticated Cross-Site Scripting in Youtube URL Embeds
Canonical Url - SQL Injection
Mail Masta Plugin <= 1.0 - SQL Injection via filter_list
Mail Masta <= 1.0 - SQL Injection via id parameter
Ajax search for K2 - 2.2
Abstract manager - 2.1
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.