Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Extplorer - 2.1.7 and previous
Replyable – Subscribe to Comments and Reply by Email < 1.4.6 - Cross-Site Scripting
eshop <= 6.3.13 - Cross-Site Forgery Request and Reflected Cross-Site Scripting
Fast Secure Contact Form <= 4.0.37 - Cross-Site Scripting
Master User - versions before 2.1.4
MainWP Child <= 2.0.27 - Multiple Cross-Site Scripting
WP Symposium <= 15.8.1 - Reflected Cross-Site Scripting
SecureMoz Security Audit <= 1.0.5 - PHP Object Injection
WP Limit Login Attempts < 2.0.1 - SQL Injection
Gallery – Photo Albums Plugin < 1.3.47 - Cross-Site Scripting
Contact Form Generator : Creative form builder for WordPress <= 2.1.86 - Cross-Site Request Forgery
Memphis Documents Library <= 2.6.16 - Remote File Inclusion
Memphis Documents Library <= 2.6.16 - Local File Inclusion
JEvents - pre 3.2.20
WPML 2.9.3-3.2.6 - Cross-Site Scripting in Accept-Language Header
BJ Lazy Load < 1.0 - Remote File Inclusion via TimThumb
Joomla GoogleSearch (CSE) - any Joomla
JCE - A Content Editor for Joomla - 2.5.2
Testimonial Slider <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WatuPRO < 4.9.0.8 - Cross-Site Request Forgery
NextGen Gallery <= 2.1.9 - Cross-Site Scripting
CKEditor for WordPress <= 4.5.3 - Reflected Cross-Site Scripting
Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.