Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
HMS Testimonials < 2.0.11 - Cross-Site Scripting
HMS Testimonials <= 2.0.10 - Cross-Site Request Forgery
Improper Input Validation in pip
Usernoise modal feedback / contact form < 3.7.9 - Cross-Site Scripting
Cobalt - 8.270
Comment Extra Fields <= 1.7 - Reflected Cross-Site Scripting
Download Monitor < 3.3.6.2 - Cross-Site Scripting via sort Parameter
Download Monitor < 3.3.6.2 - Cross-Site Scripting via p Parameter
FlagEm (Unknown Versions) - Cross-Site Scripting
WooCommerce <= 2.0.12 - Self-Reflected Cross-Site Scripting
Category Grid View Gallery <= 2.3.1 - Reflected Cross-Site Scripting
JS Restaurant (All Versions) - SQL Injection
Pinpoint Booking System – #1 WordPress Booking Plugin <= 1.3.1 - Reflected Cross-Site Scripting
BuddyPress Extended Friendship Request < 1.0.2 - Cross-Site Scripting
k2 - Open Folder Permissions
RokMicroNews <= 1.5 - Multiple Vulnerabilities
Xorbin Digital Flash Clock < 1.0 - DOM Cross-Site Scripting
qTranslate <= 2.5.39 - Cross-Site Request Forgery
Unite Horizontal Carousel
WordPress Core < 3.5.2 - Missing Authorization Checks
WordPress Core < 3.5.2 - Sensitive Information Disclosure
WordPress Core < 3.5.2 - Cross-Site Scripting
WordPress Core <= 3.5.1 - Denial of Service via wp-postpass cookie
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.