Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersWooThemes WooFramework < 5.3.10 - Remote Code Execution via Shortcodes
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 1.2.1 - Arbitrary File Upload
Front-end Editor < 2.3 - Arbitrary File Upload
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 2.0 - Arbitrary File Upload
Dean's FCKEditor <= 1.0.0 - Arbitrary File Upload
MoneyMasters (All Versions) - Arbitrary File Upload
Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting
Kish Guest Posting <= 1.2 - Unauthenticated Arbitrary File Upload
Front End Upload < 0.5.4 - Arbitrary File Upload
Kish Guest Posting <= 1.1 - Arbitrary File Upload
AllWebMenus WordPress Menu Plugin <= 1.1.8 - Arbitrary File Upload
Blaze Slideshow <= 2.4 - Arbitrary File Upload
Zingiri Web Shop <= 2.2.3 - Remote Code Execution
Global Flash Gallery <= 0.15.1 - Arbitrary File Upload
is-human <= 1.4.2 - Unauthenticated Remote Code Execution
WP Forum Server <= 1.6.5 - SQL Injection
Uploadify <= 1.0 - Arbitrary File Upload
User Photo <= 0.9.4 - Arbitrary File Upload
WordPress Core < 3.0.2 - Cross-Site Scripting
WordPress Core <= 2.8.5 - Arbitrary File Upload
WordPress Core <= 2.8.4 - Denial of Service
Page Flip Image Gallery <= 0.2.2 - Directory Traversal
PHP Shell (All Versions) - Backdoor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.