Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
WP-Cumulus <= 1.20 - Sensitive Information Exposure
Various Affected Software (Various Versions) - Arbitrary File Upload
WordPress Core <= 2.8.4 - Denial of Service
WP Forum <= 2.3 - Multiple SQL Injections
WP Cumulus < 1.22 - Cross-Site Scripting
WordPress Core & WordPress MU < 2.8.1 - Full Path Disclosure
Buildbot vulnerable to cross-site scripting
Buildbot Cross-site scripting (XSS) vulnerability
WordPress Core < 2.8.4 - Forced Password Reset
WordPress Core < 2.8.3 - Authorization Bypass
WordPress Core < 2.8.3 - Missing Authorization
Google Analyticator <= 5.2 - Cross-Site Scripting
WordPress Core <= 2.8.1 - Cross-Site Scripting
my-category-order <= 2.8.7 - SQL Injection
WordPress Core & WordPress MU < 2.8.1 - Username Enumeration
WordPress Core <= 2.8 - Sensitive Information Disclosure
WordPress Core & WordPress MU < 2.8.1 - Username Enumeration
Related Sites <= 2.2 - SQL Injection
DM Albums <= 1.9.2 - Remote File Inclusion
FireStats <1.6.2 - SQL Injection
Photoracer Plugin <= 1.0 - SQL Injection
FireStats < 1.6.2 - Remote File Inclusion
WordPress Core < 2.8 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.