Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
WordPress Core < 4.0.1 - Cross-Site Scripting via media-playlists
Ninja Forms Contact Form <= 2.8.8 - Stored Cross-Site Scripting
WordPress Core < 4.0.1 - Cross-Site Scripting
WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset
WordPress Core < 4.0.1 - Cross-Site Scripting via Shortcode Brackets
Polls CP < 1.0.1 - Cross-Site Scripting
WordPress Core < 4.0.1 - Denial of Service via Long Password
SP Project & Document Manager < 2.4.4 - Multiple SQL Injection
WordPress Core < 4.0.1 - Server-Side Request Forgery
Gallery Manager <= 1.5.12 - Cross-Site Scripting
WP Statistics < 8.3.1 - Multiple Cross-Site Scripting
Wordpress Core < 4.0.1 - Hash Collision
WordPress Core < 4.0.1 - Cross-Site Scripting via CSS
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authe
Watu Quiz <= 2.5.0.1 - Stored Cross-Site Scripting
Admin Exile
WP Support Plus Responsive Ticket System <= 4.1 - Directory Traversal
WP Support Plus Responsive Ticket System <= 4.1 - Improper Authentication
Paid Memberships Pro < 1.7.15 - Directory Traversal
SupportEzzy Ticket System Plugin <= 1.2.5 - Cross-Site Scripting
DukaPress < 2.5.4 - Directory Traversal
AceShop
MijoShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.