Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
RobotCPA <= 5 - Unauthenticated Local File Inclusion
PayPal Currency Converter BASIC for WooCommerce <= 1.3 - Path Traversal to Arbitrary File Read
AddThis <= 5.0.2 - Authenticated Stored Cross-Site Scripting
WooCommerce <= 2.3.10 - PHP Object Injection
Erident Custom Login & Dashboard <= 3.4.1 - Cross-Site Request Forgery
Aviary Image Editor Add-on For Gravity Forms <= 3.0 (Beta r7) - Arbitrary File Upload
Easy2Map <= 1.2.4 - SQL Injection
Easy2Map Photos <= 1.0.9 - SQL Injection
Encrypted Contact Form < 1.1 - Cross-Site Scripting
Easy2map-photos <= 1.0.9 - Path Traversal
Easy2Map <= 1.2.4 - Directory Traversal
NewStatPress <= 1.0.0 - SQL Injection
Ultimate Product Catalogue < 3.1.3 - SQL Injection
SE HTML5 Album Audio Player <= 1.1.0 - Directory Traversal
ZM Ajax Login & Register <= 1.0.9 - Local File Inclusion
Ninja Forms Contact Form <= 2.9.18 - Cross-Site Scripting
Really Simple Guest Post <= 1.0.6 - Local File Inclusion
Events Manager < 5.5.7.1 - Cross-Site Scripting
zM Ajax Login & Register <= 1.0.9 - Cross-Site Scripting
Users Ultra <= 1.5.15 - Multiple SQL Injection
Codestyling Localization <= 1.99.30 - Cross-Site Request Forgery to Remote Code Execution
LeagueManager < 4.0.5 - SQL Injection
Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.