Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersRestrict Content <= 3.2.7 - Information Exposure via legacy log file
WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
Linker <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Vertical marquee plugin <= 7.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Popup with fancybox <= 3.5 - Authenticated (Subscriber+) SQL Injection via Shortcode
WP fade in text news <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
wp image slideshow <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Wp anything slider <= 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Wp photo text slider 50 <= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Superb slideshow gallery <= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Up down image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.