Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersND Learning <= 4.7 - Open Redirect
Popup Builder <= 3.44 - SQL Injection
ND Booking <= 2.4 - Unauthenticated Arbitrary Options Update
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Travel Management <= 1.6.1 - Open Redirect
Donations < 1.4 - Unauthenticated Arbitrary Options Change
Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update
JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Animate It <= 2.3.5 - Cross-Site Scripting
Animate It <= 2.3.5 - Cross-Site Scripting
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
Simple Membership <= 3.8.4 - Cross-Site Request Forgery
Custom Simple RSS < 2.0.7 - Cross-Site Request Forgery
Animate It <= 2.3.5 - Cross-Site Request Forgery
Photo Gallery by 10Web <= 1.5.30 - SQL Injection
Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection
Contact Form 7 Dynamic Text Extension < 2.0.3 - Reflected Cross-Site Scripting
WPS Cleaner <= 1.4.4 - Missing Authorization Checks
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via 'action=confirmaction'
WPS Hide Login <= 1.5.2.2 - Login Page Disclosure via Referer Header
WPS Limit Login < 1.4.6.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.