Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
WP Remote Upload <= 1.2.1 - Cross-Site Request Forgery to Arbitrary File Upload
WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass
Search Everything <= 8.1.5 - SQL Injection
CM Ad Changer <= 1.7.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
EWWW Image Optimizer <= 2.8.4 - Remote Code Execution
Blaze Slide Show <= 2.7 - Arbitrary File upload
Double Opt-In for Download <= 2.0.9 - SQL Injection
Newspaper - News & WooCommerce WordPress Theme <= 6.7 - Arbitrary Options Update
OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass
Levo Slideshow <= 2.3 - Cross-Site Scripting
Newspaper - News & WooCommerce WordPress Theme < 6.7.2 - Cross-Site Scripting
Link Following in ansible
WP Mobile Detector <= 3.5 - Arbitrary File Upload
SecurityCheck and SecurityCheck Pro Vulnerable Versions:
CMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection
Stream <= 3.0.5 - Sensitive Data Exposure
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting
Gallery - Video Gallery and YouTube Gallery <= 1.7.01 - Stored Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more <= 2.0.31 - Stored Cross-Site scripting
Kento Post View Counter <= 2.8 - SQL Injection
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting
WP Fastest Cache <= 0.8.5.7 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.