Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
WordPress Core < 4.4.2 - Open Redirect via wp_validate_redirect
Simple add pages or posts < 1.7 - Cross-Site Request Forgery
eShop <= 6.3.14 - Multiple SQL Injections
User Meta Manager Plugin < 3.4.7 - Privilege Escalation
SP Project & Document Manager <= 2.5.9.5 - Cross-Site Request Forgery
MailPoet Newsletters <= 2.6.19 - Reflected Cross-Site Scripting
WordPress Core < 4.4.2 - Server-Side Request Forgery
User Meta Manager < 3.4.8 - Missing Authorization to Sensitive Information Disclosure
Connections Business Directory < 8.5.9 - Cross-Site Scripting
EasySocial versions before
Titan Anti-spam & Security <= 4.1 - Cross-Site Scripting
Sola Support Tickets < 3.13 - Cross-Site Scripting
rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting
Appointment Booking Calendar <= 1.2.24 - SQL Injection
IMPress Listings <= 2.0.1 - Reflected Cross-Site Scripting
Formidable Form Builder <= 1.07.11 - SQL Injection
WP Easy Gallery <= 4.1.4 - Stored Cross-Site Scripting
Appointment Booking Calendar <= 1.2.24 - Cross-Site Scripting
Appointment Booking Calendar <= 1.1.23 - SQL Injection
OneLogin SAML SSO < 2.2.0 - Authentication Bypass
Simple Download Monitor <= 3.2.8 - Missing Authorization
Download Manager <= 2.8.7 - Missing Authorization
Download Manager <= 2.8.7 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.