Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 - Remote Code Execution
WordPress Core < 4.1.2 - Cross-Site Scripting
WP SpreadPlugin < 3.8.6.2 - Cross-Site Scripting
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 3.4 - SQL Injection
Exchange Addon Custom URL Tracking < 1.1.0 - Reflected Cross-Site Scripting
Two Factor Authentication < 1.1.10 - Cross-Site Scripting
Easy Digital Downloads – Recurring Payments <= 2.3 - Cross-Site Scripting
Manual Purchases < 1.1.0 - Reflected Cross-Site Scripting
Gravityforms <= 1.9.6 - Cross-Site Scripting
Easy Digital Downloads – Free Downloads <= 1.0.3 - Reflected Cross-Site Scripting
Easy Digital Downloads – Wish Lists < 1.1.1 - Cross-Site Scripting
Easy Digital Downloads – QR Codes <= 1.1.0 - Reflected Cross-Site Scripting
WP eCommerce <= 3.9.2 - Reflected Cross-Site Scripting
Market < 5.1.27 - Reflected Cross-Site Scripting
Exchange Addon Membership < 1.3.0 - Reflected Cross-Site Scripting
Easy Digital Downloads - Cross-Sell and Upsell <= 1.1.2 - Reflected Cross-Site Scripting
Asset CleanUp: Page Speed Booster <= 1.3.6.6 - Reflected Cross-Site Scripting
P3 (Plugin Performance Profiler) < 1.5.3.9 - Cross-Site Scripting
Easy Digital Downloads – Shoppette Theme < 1.0.5 - Cross-Site Scripting
Easy Digital Downloads – Amazon S3 <= 2.1.3 - Cross-Site Scripting
Ninja Forms <= 2.9.10 - Reflected Cross-Site Scripting
My Calendar < 2.3.10 - Reflected Cross-Site Scripting
Easy Digital Downloads – Product Reviews <= 1.3.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.