Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAdmin Menu Groups <= 0.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Comments Capcha Box <= 1.1 - Reflected Cross-Site Scripting
DetailX <= 1.10.0 - Unauthenticated Local File Inclusion
TC Testimonials <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
W&D <= 1.0 - Unauthenticated Local File Inclusion
MaxCube <= 1.3.1 - Unauthenticated Local File Inclusion
BugsPatrol <= 1.5.0 - Unauthenticated PHP Object Injection
smart SEO <= 2.12 - Unauthenticated Local File Inclusion
Tripster <= 1.0.10 - Unauthenticated Local File Inclusion
Captcha.eu <= 1.0.61 - Unauthenticated Server-Side Request Forgery
Winger <= 1.0.16 - Unauthenticated Local File Inclusion
Pubzinne <= 1.0.12 - Unauthenticated Local File Inclusion
Agricola <= 1.1.0 - Unauthenticated Local File Inclusion
iFrame Block <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fabric <= 1.5.0 - Unauthenticated Local File Inclusion
Backup Bolt <= 1.4.1 - Cross-Site Request Forgery
Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion
Fabrica <= 1.8.1 - Unauthenticated Local File Inclusion
Rare Radio <= 1.0.15.1 - Unauthenticated Local File Inclusion
Compress Then Upload <= 1.0.4 - Authenticated (Admin+) Arbitrary File Upload
Simple Business Directory Pro < 15.6.9 - Unauthenticated Privilege Escalation
Markup Markdown <= 3.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Portfolio Manager Pro 3.8 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.