Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSearch Everything <= 8.1.5 - SQL Injection
CM Ad Changer <= 1.7.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
EWWW Image Optimizer <= 2.8.4 - Remote Code Execution
Blaze Slide Show <= 2.7 - Arbitrary File upload
Double Opt-In for Download <= 2.0.9 - SQL Injection
Newspaper - News & WooCommerce WordPress Theme <= 6.7 - Arbitrary Options Update
OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass
Levo Slideshow <= 2.3 - Cross-Site Scripting
Newspaper - News & WooCommerce WordPress Theme < 6.7.2 - Cross-Site Scripting
WP Mobile Detector <= 3.5 - Arbitrary File Upload
CMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection
Stream <= 3.0.5 - Sensitive Data Exposure
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting
Gallery - Video Gallery and YouTube Gallery <= 1.7.01 - Stored Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more <= 2.0.31 - Stored Cross-Site scripting
Kento Post View Counter <= 2.8 - SQL Injection
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting
Markdown on Save Improved <= 2.5 - Stored Cross-Site Scripting
WP Fastest Cache <= 0.8.5.7 - Local File Inclusion
Caldera Forms – More Than Contact Forms < 1.4.0 - Sensitive Information Disclosure
WP Fastest Cache <= 0.8.5.7 - Missing Authorization
Brafton < 3.4.8 - Reflected Cross-Site Scripting
Image Gallery - Responsive Photo Gallery <= 1.9.57 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.