Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
qTranslate X < 3.4.4 - Reflected Cross-Site Scripting
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Image Gallery - Responsive Photo Gallery <= 1.5.5 - Reflected Cross-Site Scripting
Subscribe To Comments Reloaded < 150820 - Reflected Cross-Site Scripting
Alpine PhotoTile for Instagram < 1.2.7.6 - Reflected Cross-Site Scripting
Master Slider - Responsive Touch Slider <= 2.5.1 - Authenticated Blind SQL Injection
MDC Private Message <= 1.0.1 - Cross-Site Scripting
Ultimate Member <= 1.3.17 - Cross-Site Scripting
404 to 301 – Redirect, Log and Notify 404 Errors <= 2.0.2 - SQL Injection
WP Job Manager < 1.23.8 - Multiple Cross-Site Scripting
WP Database Backup < 3.4 - Authenticated Stored Cross-Site Scripting
Slideshow Gallery <= 1.5.3.2 - Reflected Cross-Site Scripting
Visitor Maps <= 1.5.8.6 - Stored Cross-Site Scripting
Slideshow Gallery <= 1.5.3.1 - Cross-Site Request Forgery to Arbitrary File Upload
WP Google Map Plugin < 3.0.0 - Cross-Site Request Forgery to Cross-Site Scripting
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
WP Social Bookmarking Light < 1.7.10 - Cross-Site Scripting
Social Media Widget by Acurax < 2.2 - Stored Cross-Site Scripting
WP Google Fonts <= 3.1.3 - Reflected Cross-Site Scripting
Category Order and Taxonomy Terms Order <1.4.6.0 - Cross-Site Scripting
Easy Drag And drop All Import : WP Ultimate CSV Importer < 3.8.1 - Cross-Site Scripting
Event Manager - multiple vulnerabilities
Google Adsense and Hotel Booking <= 1.05 - Open Proxy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.