Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
recipe manager - 2.2
guesser - 1.0.4
community quiz - SQL Injection
One Vote - SQL Injection
PySAML2 XML external entity attack
Adminer <= 1.4.5 - Security Bypass to Database Login
Rockhoist Badges <= 1.2.2 - Authenticated Stored Cross-Site Scripting
Atahualpa <= 3.7.24 - Cross-Site Scripting via Cross-Site Request Forgery
WordPress Download Manager <= 2.9.45 - Cross-Site Request Forgery
VaultPress <= 1.8.6 - Remote Code Execution
Gwolle Guestbook <= 2.1.0 - Cross-Site Request Forgery
Webapp builder 2.0 - Arbitrary File Upload
Slideshow Gallery <= 1.6.5 - Cross-Site Scripting via method
Contact Form Manager <= 1.4.3 - Cross-Site Request Forgery
How to Create an App for Android iPhone Easytouch <= 3.0 - Missing Authorization
NewStatPress < 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Gwolle Guestbook <= 2.1.0 - Stored Cross-Site Scripting
WP-Filebase <= 3.4.23 - Reflected Cross-Site Scripting
Google Analytics Dashboard <= 2.1.1 - Reflected Cross-Site Scripting
Analytics Stats Counter Statistics <= 1.2.2.5 - Unauthenticated PHP Object Injection
Alpine Photo Tile for Instagram < 1.2.10 - Reflected Cross-Site Scripting
Admin Custom Login <= 2.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP-SpamFree Anti-Spam <= 2.1.1.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.