Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Joomla Spider FAQ by Web-Dorado pre
kunena - Information Disclosure
Community Builder versions
Huge IT gallery - SQL Injection
Easy Youtube Gallery - Information Disclosure
joomunited SEO Glossary - Other
Virtuemart
WordPress Core < 4.7.2 - Cross-Site Scripting
WordPress Core < 4.7.2 - Authenticated SQL Injection
WordPress Core < 4.7.2 - Authorization Bypass to Term Disclosure
WordPress Core < 4.7.2 - Arbitrary Page Modification
InfiniteWP Client <= 1.6.0 - Unauthenticated PHP Object Injection
TDQM Arbitrary Code Execution
WangGuard < 1.8.0 - Unauthenticated Stored Cross-Site Scripting
moreAds SE <= 1.4.6 - Cross-Site Scripting
WangGuard <= 1.7.2 - Reflected Cross-Site Scripting
WP Email Users <= 1.4.4 - SQL Injection
Direct Download for Woocommerce < 1.16 - Local File Inclusion
Event Notifier <= 1.2.0 - Cross-Site Scripting
Stop User Enumeration <= 1.3.7 - Cross-Site Scripting
WP Whois Domain <= 1.0.0 - Reflected Cross-Site Scripting
Chained Quiz Plugin < 1.0 - Cross-Site Scripting
WordPress Core < 4.7.1 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.