Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
WordPress Core < 4.4.1 - Cross-Site Scripting via Theme Names
Popup Builder by OptinMonster <= 1.1.4.5 - Remote Code Execution
Commentator < 2.5.3 - Reflected Cross-Site Scripting
Command Injection in Pygments
WP Symposium Pro < 16.01 - Cross-Site Request Forgery
WP Symposium Pro < 16.01 - Cross-Site Scripting
Simple Ads Manager <= 2.9.4.116 - SQL Injection
Memberhsip Pro - versions before 2.1.1
Events Booking - versions before 2.1.1
Eshop - versions before 1.4.4
Joom Donation - Information Disclosure
Payment Form - versions before 4.2
NextGen Gallery <= 2.1.10 - Unrestricted File Upload
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery
mTouch Quiz <= 3.1.2 - Reflected Cross-Site Scripting
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery to Cross-Site Scripting
mTouch Quiz <= 3.1.2 - Stored Cross-Site Scripting
Welcart e-Commerce < 1.5.3 - SQL Injection
Admin Management Xtended <= 2.4.0 - Missing Authorization Checks
Link Log – external link click monitor < 2.1 - SQL Injection
YAWPP (Yet Another WordPress Petition Plugin) <= 1.2.2 - Cross-Site Scripting
Ninja Forms Contact Form <= 2.9.28 - Stored Cross-Site Scripting
Content text slider on post < 6.9 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.