Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Ninja Forms Contact Form 2.9.36 - 2.9.42 - PHP Object Injection
bbPress < 2.5.9 - Stored Cross-Site Scripting
MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting
Truemag (Unknown Versions) - Reflected Cross-Site Scripting
Google Authenticator <= 0.47 - Improper Authentication
Ghost <= 0.5.5 - Missing Authorization Checks
Simple Photo Gallery <= 1.8.0 - Stored Cross-Site Scripting
Komento - xss
GNUCommerce < 0.5.7-BETA - Cross-Site Scripting
Sermon Browser <= 0.45.15 - Multiple Cross-Site Scripting
The Events Calendar < 4.1.1.1 - Open Redirect
iThemes Security <= 5.3.5 - Missing Capabilities Check
gmapfp - XSS (Cross Site Scripting)
Tevolution < 2.3.0 - Arbitrary File Upload
CM Ad Changer < 1.7.6 - Cross-Site Scripting
Tweet Wheel < 1.0.3.3 - Reflected Cross-Site Scripting
Easy Social Share Buttons for WordPress <= 3.4.1 - Cross-Site Scripting
Echo Sign < 1.2 - Reflected Cross-Site Scripting
Echo Sign < 1.2 - Reflected Cross-Site Scripting
افزونه پیامک ووکامرس Persian WooCommerce SMS < 3.3.3 - Cross-Site Scripting
Unlimited Pop-Ups < 1.4.4 - Cross-Site Scripting
Google SEO Pressor for Rich snippets <= 1.2.2 - Cross-Site Scripting
iThemes Security < 5.3.1 - Insecure Backup/Logfile Generation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.