Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
WordPress Core <= 3.5.1 - Cross-Site Scripting
WordPress Core <= 3.3.1 - Cross-Site Scripting
WordPress Core < 3.3.2 - Authorization Bypass
WordPress Core < 3.3.2 - Cross-Site Scripting
WordPress Core < 3.3.2 - Cross-Site Scripting
SWFUpload <= 2.2.0.1 - Cross-Site Scripting
WordPress Core <= 3.3.1 - Same Origin Policy Bypass
Zingiri Web Shop < 2.4.0 - Multiple Vulnerabilities
Zingiri Tickets <= 3.0.3 - Sensitive Information Disclosure
Organizer <= 1.2.1 - Path Disclosure
Timely All-in-One Events Calendar < 1.6 - Cross-Site Scripting
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 1.2.1 - Arbitrary File Upload
Front-end Editor < 2.3 - Arbitrary File Upload
Uploadify Integration <= 0.9.7 - Reflected Cross-Site Scripting
TagGator Plugin < 1.33 - SQL Injection
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 2.0 - Arbitrary File Upload
Dean's FCKEditor <= 1.0.0 - Arbitrary File Upload
WordPress Integrator <= 1.32 - Cross-Site Scripting
Register Plus Redux <= 4.3 - Cross-Site Scripting
BuddyPress - 1.5-1.5.4 - SQL Injection
CMS Tree Page View < 0.8.9 - Cross-Site Scripting
MoneyMasters (All Versions) - Arbitrary File Upload
Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.