Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersBackupBuddy < 3.0 - Authentication Bypass
Occasions <= 1.1 - Cross-Site Request Forgery
MailUp newsletter sign-up form < 1.3.2 - Cross-Site Scripting
MailUp newsletter sign-up form < 1.3.3 - Cross-Site Scripting
All-in-One Events Calendar < 1.10 - SQL Injection
Marekkis Watermark-Plugin <= 0.9.4 - Cross-Site Scripting
MailPoet Newsletters <= 2.2 - Multiple SQL Injections
Flash News (All Versions) - Multiple Vulnerabilities
Spam Free WordPress <= 1.9.3 - Full Path Disclosure
Spam Free WordPress <= 1.9.3 - IP Protection Bypass
OpenInviter for WordPress <= 1.7.0 - Sensitive Information Disclosure
Nuance <= 1.2 - Arbitrary File Upload
Sahifa <= 2.4.0 - Cross-Site Request Forgery
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - Arbitrary File Modification
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 3.1.0 - Arbitrary File Deletion
Grou Random Image Widget <= 1.18 - Full Path Disclosure
WordPress RokBox <= 2.13 - Content Spoofing
Simple Gmail Login < 1.1.4 - Sensitive Information Disclosure
MailPoet Newsletters (Previous) <= 2.1.6 - Cross-Site Scripting
Yoast SEO <= 2.1.1 - Cross Site Scripting via post_title parameter
Cimy User Manager < 1.4.4 - Arbitrary File Read
White Label CMS < 1.5.1 - Reflected Cross-Site Scripting
Wordfence < 3.3.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.