Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersPowerPress <= 6.0.0 - Cross-Site Scripting
WooCommerce <= 2.2.10 - Cross-Site Scripting
WPTouch < 3.7 - Open Redirect
Photo Gallery by 10Web <= 1.2.10 - Authenticated Cross-Site Scripting
Feedweb <= 3.0.10 - Missing Authorization
Geo Mashup < 1.8.3 - Cross-Site Scripting
WDSocialWidgets < 1.0.11 - Cross-Site Scripting
Acobot Live Chat & Contact Form <= 2.0 - Cross-Site Request Forgery and Cross-Site Scripting
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting
RedSteel (All Versions) - File Disclosure
Cart66 Lite :: WordPress Ecommerce <= 1.5.4 - Reflected Cross-Site Scripting
WordPress File Upload <= 2.4.6 - Arbitrary File Upload
Photo Gallery by 10Web <= 1.2.10 - Authenticated SQL Injection via asc_or_desc Parameter
Contact Form <= 3.82 - Authorization Bypass
Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Update
Pagelines Theme < 1.4.6 - Missing Authorization
Pixabay Images <= 2.3 - Cross-Site Scripting
Pixabay Images <= 2.3 - Arbitrary File Upload
Pixabay Images <= 2.0 - Authentication Bypass to Arbitrary File Upload
Pixabay Images <= 2.3 - Directory Traversal
Holding Pattern <= 0.6 - Arbitrary File Upload
Store Locator Plus < 4.2.27 - Email Injection
Pie Register <= 2.0.13 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.