Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersAthos <= 1.9 - Unauthenticated Local File Inclusion
Vayu Blocks <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Block Attributes
Beautique <= 1.5 - Unauthenticated Local File Inclusion
RockON DJ <= 3.3 - Reflected Cross-Site Scripting
Legacy <= 1.9 - Unauthenticated Local File Inclusion
Harper <= 1.13 - Unauthenticated Local File Inclusion
Paragon <= 1.1 - Unauthenticated Local File Inclusion
Rentic <= 1.1 - Unauthenticated Local File Inclusion
Hygia <= 1.16 - Unauthenticated Local File Inclusion
Good Mood <= 1.16 - Unauthenticated Local File Inclusion
PostX <= 4.1.36 - Missing Authorization
Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update
Towny <= 1.16 - Unauthenticated Local File Inclusion
Assembly <= 1.1 - Unauthenticated Local File Inclusion
Critique <= 1.17 - Unauthenticated Local File Inclusion
Client Invoicing by Sprout Invoices <= 20.8.7 - Unauthenticated PHP Object Injection
FitLine <= 1.6 - Unauthenticated Local File Inclusion
Vocal <= 1.12 - Unauthenticated Local File Inclusion
Floating Window Music Player <= 3.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Manufactory <= 1.4 - Unauthenticated Local File Inclusion
Greeny <= 2.6 - Unauthenticated Local File Inclusion
Admin and Site Enhancements <= 7.9.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.