Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersNextGen Gallery <= 2.0 - Path Traversal
Subscribe To Comments Reloaded <= 140129 - Cross-Site Request Forgery to Cross-Site Scripting
Nextend Social Login and Register <= 1.5.0 - Cross-Site Scripting
Acunetix WP Security <= 4.0.4 - Cross-Site Request Forgery
Search Everything <= 7.0.2 - SQL Injection
All In One Slider <= 1.2.20 - Reflected Cross-Site Scripting
Kiddo Theme (All Versions) - Arbitrary File Upload
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Cross-Site Scripting
BuddyPress <= 1.9.1 - Authorization Bypass
Stop User Enumeration <= 1.2.4 - Security Bypass
Dendelion < 2.6.6 - Arbitrary File Upload
Media File Renamer < 1.9.4 - Stored Cross-Site Scripting
amerisale-re (All Versions) - Arbitrary File Upload
Photocrati <= 4.8.0 - Cross-Site Scripting
SEO Link Rotator <= 1.0 - Cross-Site Scripting
Media Downloader <= 0.1.992 - Reflected Cross-Site Scripting
Nokia Maps & Places < 1.6.7 - Open Redirect
Social Ring (Facebook Like, Google +1, ReTweet, LinkedIn and Pin It) <= 1.1.9 - Cross-Site Scripting
Newsletter Manager < 1.4 - Cross-Site Request Forgery
DT Chocolate (All Versions) - Cross-Site Scripting
lote27 (All Versions) - Arbitrary File Download
WP-Members Membership Plugin <= 2.8.9 - Reflected Cross-Site Scripting
April's Super Functions Pack <= 1.4.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.