Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Football [com_football] - SQL Injection
Events Manager < 5.5.7 - Cross-Site Scripting
Church Admin < 0.810 - Stored Cross-Site Scripting
Custom Content Type Manager <= 0.9.8.5 - Authenticated (Admin+) Remote Code Execution
woo-popup <= 1.2.2 - Reflecte Cross-Site Scripting
WP Membership <= 1.2.3 - Privilege Escalation
WP Membership <= 1.2.3 - Cross-Site Scripting
WP Photo Album Plus < 6.1.3 - Cross-Site Scripting
Polls CP < 1.0.5 - Cross-Site Scripting
OS Property - Joomla Real Estate sqli pre
FeedWordPress < 2015.0514 - SQL Injection
Simple Backup <= 2.7.10 - Arbitrary File Download via Path Traversal
Brute Force Login Protection <= 1.5.1 - Cross-Site Request Forgery
Awesome Support – WordPress HelpDesk & Support Plugin <= 3.1.6 - Arbitrary Shortcode Execution
Blessing Premium Responsive WordPress Theme < 1.3.2.1 - Sensitive Information Disclosure
My Calendar <= 2.3.29 - Path Traversal to Remote Code Execution
FGallery Plus (All Versions) - Reflected Cross-Site Scripting
Goodnex Responsive HTML5/CSS3 Site Template < 1.1.3 - Sensitive Information Disclosure
Almera Responsive Portfolio Site Template < 2015-05-15 - Sensitive Information Disclosure
Almera Responsive Portfolio Site Template < 1.1.8 - Sensitive Information Disclosure
Axioma Premium Responsive < 1.1.2 - Information Disclosure
Invento | Architecture Building Agency Template <= 2015-05-15 - Sensitive Information Disclosure
Accio | Responsive Onepage Parallax Agency WordPress Theme <= 1.1.0 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.