Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersContact Form Generator : Creative form builder for WordPress <= 2.1.86 - Cross-Site Request Forgery
Memphis Documents Library <= 2.6.16 - Remote File Inclusion
Memphis Documents Library <= 2.6.16 - Local File Inclusion
WPML 2.9.3-3.2.6 - Cross-Site Scripting in Accept-Language Header
BJ Lazy Load < 1.0 - Remote File Inclusion via TimThumb
Testimonial Slider <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WatuPRO < 4.9.0.8 - Cross-Site Request Forgery
NextGen Gallery <= 2.1.9 - Cross-Site Scripting
CKEditor for WordPress <= 4.5.3 - Reflected Cross-Site Scripting
Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
sourceAFRICA <= 0.1.3 - Cross-Site Scripting
Job Manager <= 0.7.25 - Insecure Direct Object Reference
Captain Slider <= 1.0.6 - Stored Cross-Site Scripting
NextGen Gallery <= 2.1.7 - Path Traversal
NextGen Gallery <= 2.1.10 - Local File Inclusion
SoundCloud Is Gold <= 2.3.1 - Reflected Cross-Site Scripting
Car Rental System < 3.1 - SQL Injection
Private Only <= 3.5.1 - Multiple Cross-Site Request Forgery
Simple Slideshow Manager <= 2.1 - Cross-Site Request Forgery
Role Scoper <= 1.3.64 - Reflected Cross-Site Scripting
Smart Slider 2 <= 2.3.11 - Reflected Cross-Site Scripting
Navis DocumentCloud < 0.1.1 - Reflected Cross-Site Scripting
YouTube Embed <= 3.3.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.