Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
WordPress Core < 4.5.3 - Revision History Disclosure
Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update
Contus Video Comments <= 1.0 - Authorization Bypass
Yoast SEO <= 3.2.5 - Cross-Site Scripting
OpenStack Identity Keystone Improper Access Control
WP Remote Upload <= 1.2.1 - Cross-Site Request Forgery to Arbitrary File Upload
WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass
Search Everything <= 8.1.5 - SQL Injection
CM Ad Changer <= 1.7.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
EWWW Image Optimizer <= 2.8.4 - Remote Code Execution
Blaze Slide Show <= 2.7 - Arbitrary File upload
Double Opt-In for Download <= 2.0.9 - SQL Injection
Newspaper - News & WooCommerce WordPress Theme <= 6.7 - Arbitrary Options Update
OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass
Levo Slideshow <= 2.3 - Cross-Site Scripting
Newspaper - News & WooCommerce WordPress Theme < 6.7.2 - Cross-Site Scripting
Link Following in ansible
WP Mobile Detector <= 3.5 - Arbitrary File Upload
SecurityCheck and SecurityCheck Pro Vulnerable Versions:
CMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection
Stream <= 3.0.5 - Sensitive Data Exposure
Comments - wpDiscuz <= 3.1.4 - Reflected Cross-Site Scripting
Gallery - Video Gallery and YouTube Gallery <= 1.7.01 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.