Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,547
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Konzept (Unkown Versions) - Arbitrary File Upload
Gallery Objects <= 0.4 - SQL Injection
AceSEF - 4.1.2 and below
WP RSS Multi Importer < 3.14 - Cross-Site Request Forgery
WP Photo Album Plus <= 5.4.7 - Stored Cross-Site Scripting
WP-Ban < 1.64 - Improper Input Validation
Login Widget With Shortcode < 3.2.1 - Cross-Site Scripting
Ready! Google Maps <= 1.1.5 - Cross-Site Scripting
Disqus Comment System < 2.79 - Multiple Cross-Site Request Forgery
Webcam 2Way Videochat <= 4.41 - Cross-Site Scripting
Custom Contact Forms <= 5.1.0.3 - Missing Authorization
Cakifo 1.0 - 1.6.1 - Cross-Site Scripting
Formcraft (Unknown Versions) - Arbitrary File Deletion
Ready! Ecommerce Shopping Cart < 0.5.1 - Cross-Site Request Forgery and Cross-Site Scripting
WooCommerce <= 2.2.2 - Reflected Cross-Site Scripting
EuropaCart
WooCommerce <= 2.2.2 - Cross-Site Scripting via range Parameter
Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI
Wordfence <= 5.2.3 - Multiple Protection Mechanism Bypasses
Spider Contacts
Support Plus Responsive Ticket System <= 4.1 - Full Path Disclosure
Support Plus Responsive Ticket System <= 4.1 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.