Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
WP Mobile Detector <= 3.2 - Stored Cross-Site Scripting
NewStatPress <= 1.0.6 - Reflected Cross-Site Scripting
Contus HD Video Share (aka HDVideoShare) by Apptha [com_contushdvideoshare] - Directory Traversal
Nextend Social Login and Register <= 1.5.5 - Reflected Cross-Site Scripting
Nextend Twitter Connect <= 1.5.1 - Reflected Cross-Site Scripting
Simple Image Gallery PRO - XSS (Cross Site Scripting)
BK Multithumb for Joomla - XSS (Cross Site Scripting)
WP Accurate Form Data <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Responsive Portfolio Wall [mod_repowa] - XSS (Cross Site Scripting)
Zen Library [zen] - XSS (Cross Site Scripting)
JB Library [jblibrary] - XSS (Cross Site Scripting)
UMI 3D Tag Cloud [mod_umi3dtagcloud] - XSS (Cross Site Scripting)
Art Pretty Photo [artprettyphoto] - XSS (Cross Site Scripting)
pPGallery [plg_content_ppgallery] - XSS (Cross Site Scripting)
Escope PrettyPhoto [mod_escope_pp] - XSS (Cross Site Scripting) - abandonware!
StarLite Pretty Photo [plg_system_slprettyphoto] - XSS (Cross Site Scripting)
BK MultiThumb [multithumb] - XSS (Cross Site Scripting)
AP Portfolio [mod_ap_portfolio] - XSS (Cross Site Scripting)
Joombri Freelance - SQLi
Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery
Erident Custom Login and Dashboard <= 3.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Salem Theme <= 1.5.5 - DOM-based Cross-Site Scripting
Ultimate Member 1.2.98 - 1.2.997 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.