Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
WordPress Core < 3.5.2 - Cross-Site Scripting via Multiple Vectors
WordPress Core <= 3.5.1 - Content-Spoofing Attacks
WordPress Core < 3.5.2 - XXE Injection
Slash WP (All Versions) - Multiple Vulnerabilities
Ultimate WordPress Auction Plugin < 1.0.1 - Cross-Site Request Forgery
WordPress Gallery Plugin – NextGEN Gallery <= 1.9.12 - Arbitrary File Upload
JobRoller <= 1.7.4 - Reflected Cross-Site Scripting
Ambience (Unspecified Versions) - Cross-Site Scripting
WP Maintenance Mode <= 1.8.7 - Missing Authorization Checks & Cross-Site Request Forgery
AntiVirus < 1.1 - Full Path Disclosure
Master Password
Jinc
CiviCRM
flashChart Content Plugin
Exploit Scanner <= 1.3.3 - Full Path Disclosure
Jinc
WordPress Exit Strategy <= 1.55 - Information Exposure
WordPress Exit Box Lite <= 1.0.6 - Cross-Site Request Forgery
WordPress Exit Strategy <= 1.55 - Cross-Site Request Forgery
WordPress Exit Box Lite <= 1.06 - Full Path Dislcosure
ADIF Log Search Widget <= 1.0f - Cross-Site Scripting
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.5.4 - Cross-Site Scripting
Flagallery-skins <= 1.1.5 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.