Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Search Autocomplete < 1.0.9 - SQL Injection
TimThumb <= 1.33 - Remote File Download
FV Flowplayer Video Player <= 1.2.11 - Cross-Site Scripting
Social Slider < 7.4.2 - SQL Injection
eShop < 6.2.9 - Reflected Cross-Site Scripting
High severity vulnerability that affects Plone and Zope2
WordPress Share Buttons Plugin – AddThis < 2.2.0 - Code Injection
Plone Cross-site Scripting vulnerability
WordPress Core < 3.1.3 - Clickjacking
WordPress Core < 3.1.3 - Sensitive Information Disclosure
WordPress Core <= 3.1.2 - SQL Injection
WordPress Core <= 3.1.2 - Arbitrary File Upload
WordPress Core < 3.1.3 - Username Enumeration
WordPress Core < 3.1.3 - Security Hardening
WordPress Core < 3.1.3 - Media Related Security Issue
is-human <= 1.4.2 - Unauthenticated Remote Code Execution
WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users
Sermon Browser < 0.43.6 - SQL Injection
Sermon Browser < 0.43.6 - Cross-Site Scripting
WordPress Core < 3.0.6 - Incorrect Authorization Checks
SocialGrid <= 2.4 - Cross-Site Scripting
feedparser Cross-site Scripting vulnerability
feedparser Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.