Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersFreshmail for WordPress <= 1.5.8 - SQL Injection
Freshmail <= 1.5.8 - Multiple SQL Injections
Pie Register 2.0.14-2.0.15 - SQL Injection
AA-Team Premium SEO Pack <= 1.8.0 - Local File Disclosure and Arbitrary File Upload
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Sensitive Information Disclosure
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Multiple Cross-Site Scripting
Resend Welcome Email <= 1.0.1 - Reflected Cross-Site Scripting
QAEngine <= 1.4 - Privilege Escalation
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder < 1.2 - Remote Code Execution
Ninja Forms <= 2.9.10 - Reflected Cross-Site Scripting
WordPress Core < 4.1.2 - Cross-Site Scripting via Ephox in Plupload
GiveWP – Donation Plugin and Fundraising Platform < 0.8.5 - Reflected Cross-Site Scripting
Yoast SEO <= 2.0.1 - Reflected Cross-Site Scripting
Easy Digital Downloads – Per Product Emails < 1.0.9 - Cross-Site Scripting
All In One WP Security & Firewall <= 3.9.4 - Reflected Cross-Site Scripting
All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Fusion Engage <= 1.0.5 - Local File Inclusion
WP Super Cache < 1.4.3 - Cross Site Scripting
All In One WP Security & Firewall <= 3.9.0 - SQL Injection
Aspose Importer & Exporter (Discontinued) < 3.0 - Arbitrary File Download
WORDPRESS VIDEO GALLERY <= 3.0 - Improper Access Control
Simple Ads Manager 2.5.94 & 2.5.96 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.