Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Payment Gateways Caller for WP e-Commerce < 0.1.1 - Local File Inclusion
Dailydeal by Templatic < = 3.0.10 - Cross-Site Request Forgery to Arbitrary File Upload
Blue Wrench Video Widget < 2.0.0 - Cross-Site Request Forgery and to Cross-Site Scripting
event registration pro
WPLocalPlaces (Unknown Versions) - Arbitrary File Upload
videowall (All Versions) - Reflected Cross-Site Scripting
AREA53 <= 1.0.5 - Arbitrary File Upload
dhtmlxSpreadsheet <= 2.0 - Cross-Site Scripting
Quick Paypal Payments < 3.1 - Cross-Site Scripting
jomsocial below
WooCommerce <= 2.0.17 - Cross-Site Scripting
Social Sharing Toolkit <= 2.1.1 - Cross-Site Request Forgery
WP Image Resizer (Unspecified Version) - Cross-Site Scripting
Dexs PM System <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Video Metabox <= 1.1 - Stored Cross Site Scripting
Finalist (All Versions) - Cross-Site Scripting
SL User Create < 0.2.5 - Information Disclosure
Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Scripting
WordPress Landing Pages < 1.2.3 - SQL Injection
Wp-ImageZoom <= 1.0.7 - SQL Injection
Blogger Importer <= 0.5 - Cross-Site Request Forgery
WPRealty <= 2.9.1 - Time-Based Blind SQL Injection
Woopra Analytics Plugin < 1.4.3.2 - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.