Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersEshop Magic < 0.2 - Arbitrary File Read
Daisho Theme <= 4.2 - Cross-Site Scripting
WHOIS <= 1.4.2.4 - Cross-Site Scripting
Simple Download Button Shortcode <= 1.0 - Information Disclosure via Arbitrary File Downloads
WP-TopBar <= 4.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media File Renamer – Auto & Manual Rename <= 5.2.5 - Missing Authorization Checks
ThreeWP Email Reflector < 1.16 - Cross-Site Scripting
Postie < 1.4.10 - Cross-Site Scripting
Mini Mail Dashboard Widget < 1.43 - Cross-Site Scripting
WP SimpleMail <= 1.0.6 - Cross-Site Scripting
Site5 Various Affected Themes (Various Versions) - Email Spoofing
WP Cleanfix <= 3.0.1 - Cross-Site Request Forgery
WordPress Core < 3.4.1 - Information Disclosure
WordPress Core <= 3.3.2 - Sensitive Information Disclosure
WordPress Core <= 3.3.2 - Sensitive Information Disclosure
Wp-ImageZoom < 1.0.5 - Directory Traversal
Hungred Post Thumbnail <= 2.1.9 - Arbitrary File Upload
EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting
Newsletter Manager < 1.0.2 - Cross-Site Scripting
Newsletter Manager < 1.0.2 - Cross-Site Scripting via test_mail.php
User Photo <= 0.9.5 - Cross-Site Scripting
ShareYourCart < 1.7.1 - Sensitive Information Disclosure
SWFUpload <= 2.2.0.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.