Unrated
322
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Unrated
305
UMI 3D Tag Cloud [mod_umi3dtagcloud] - XSS (Cross Site Scripting)
Unrated
321
Art Pretty Photo [artprettyphoto] - XSS (Cross Site Scripting)
Unrated
315
pPGallery [plg_content_ppgallery] - XSS (Cross Site Scripting)
Unrated
304
Escope PrettyPhoto [mod_escope_pp] - XSS (Cross Site Scripting) - abandonware!
Unrated
314
StarLite Pretty Photo [plg_system_slprettyphoto] - XSS (Cross Site Scripting)
Unrated
320
BK MultiThumb [multithumb] - XSS (Cross Site Scripting)
Unrated
328
AP Portfolio [mod_ap_portfolio] - XSS (Cross Site Scripting)
Unrated
313
Joombri Freelance - SQLi
High
CVE-2015-4697
Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery
High
CVE-2015-9322
Erident Custom Login and Dashboard <= 3.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
c6b95cc2-c40b-40db-abd2-d66978cf55d1
Salem Theme <= 1.5.5 - DOM-based Cross-Site Scripting
High
461d5d5a-7bc2-4855-bc40-0edb9c538c33
Ultimate Member 1.2.98 - 1.2.997 - Reflected Cross-Site Scripting
Medium
CVE-2015-10001
WP-Stats < 2.52 - Cross-Site Request Forgery
High
eb32a095-7d2b-4a57-9d91-f79fb3486f9a
Copy or Move Comments < 1.0.1 - Cross-Site Scripting and SQL Injection
Medium
39a74c20-42a2-4099-8e6c-9989a3ba081d
Salient < 5.5.53 - DOM Cross-Site Scripting
Medium
beadd35b-2bce-431e-8347-2d1a87d02f01
Users To CSV <= 1.4.5 - Cross-Site Request Forgery
Medium
CVE-2015-9444
Altos Connect <= 1.3.0 - Cross-Site Scripting
Medium
CVE-2015-10090
WordPress Landing Pages <= 1.8.7 - Cross-Site Scripting
Unrated
297
XCloner Backup and Restore [com_cloner] - 3.5.2
High
CVE-2015-4694
Zip Attachments <= 1.5 - Directory Traversal
High
CVE-2015-4703
WordPress Renaming Tool by Vlajo <= 1.0 - Path Traversal
Unrated
307
BeestoHelpDesk - Information Disclosure
Unrated
303
"EQ Event Calendar" [com_eqfullevent] - 1.0.0 and below
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.