Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
bbPress <= 2.5.9 - Cross-Site Scripting
WP Job Manager <= 1.26.1 - Arbitrary File Upload
Photo Gallery by Ays – Responsive Image Gallery < 1.0.1 - SQL Injection
SEO Plugin by Squirrly SEO < 6.1.5 - Directory Traversal
SEO Plugin by Squirrly SEO < 6.1.5 - Missing Authorization Checks
Ultimate Member <= 1.3.64 - Local File Inclusion
WP-EMail <= 2.67.2 - Unauthenticated Cross-Site Scripting
Profile Builder <= 2.4.0 - Privilege Escalation
WP Maintenance Mode <= 2.0.6 - Authenticated Information Disclosure
BePro Listings <= 2.2.0020 - Unauthenticated Arbitrary File Upload
WP Maintenance Mode <= 2.0.6 - Missing Authorization
Real3D Flipbook <= 1.0 - Reflected Cross-Site Scripting
Advanced AJAX Page Loader < 2.7.7 - Arbitrary File Upload
Real3D Flipbook <= 1.0.0 - File Upload to User Controlled Location
Real3D Flipbook <= 2.8 - Reflected Cross-Site Scripting via bookId parameter
Real3D Flipbook <= 1.0.0 - Directory Traversal
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads
WangGuard < 1.7.2 - Reflected Cross-Site Scripting
Real3D Flipbook <= 2.8 - Unauthenticated Arbitrary File or Directory Delete
Store Locator Plus <= 4.5.11 - Cross-Site Scripting
ColorWay <= 3.4.1 - Cross-Site Scripting
FormBuilder < 1.08 - SQL Injection
WordPress Landing Pages <= 2.2.4 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.