Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
OneLogin SAML SSO < 2.2.0 - Authentication Bypass
Simple Download Monitor <= 3.2.8 - Missing Authorization
Download Manager <= 2.8.7 - Missing Authorization
Download Manager <= 2.8.7 - Privilege Escalation
Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing
WordPress Core < 4.4.1 - Cross-Site Scripting via Theme Names
Popup Builder by OptinMonster <= 1.1.4.5 - Remote Code Execution
Commentator < 2.5.3 - Reflected Cross-Site Scripting
Command Injection in Pygments
WP Symposium Pro < 16.01 - Cross-Site Request Forgery
WP Symposium Pro < 16.01 - Cross-Site Scripting
Simple Ads Manager <= 2.9.4.116 - SQL Injection
Memberhsip Pro - versions before 2.1.1
Events Booking - versions before 2.1.1
Eshop - versions before 1.4.4
Joom Donation - Information Disclosure
Payment Form - versions before 4.2
NextGen Gallery <= 2.1.10 - Unrestricted File Upload
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery
mTouch Quiz <= 3.1.2 - Reflected Cross-Site Scripting
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery to Cross-Site Scripting
mTouch Quiz <= 3.1.2 - Stored Cross-Site Scripting
Welcart e-Commerce < 1.5.3 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.