Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersMoody <= 2.7.3 - Unauthenticated Local File Inclusion
Atlas <= 2.1.0 - Unauthenticated Local File Inclusion
OchaHouse <= 2.2.8 - Unauthenticated Local File Inclusion
Brook <= 2.9.0 - Unauthenticated Local File Inclusion
Typify <= 3.0.2 - Unauthenticated Local File Inclusion
Oshine <= 7.2.7 - Unauthenticated Local File Inclusion
Racquet <= 1.12.0 - Unauthenticated Local File Inclusion
Rozy - Flower Shop <= 1.2.25 - Unauthenticated Local File Inclusion
Mitech <= 2.3.4 - Unauthenticated Local File Inclusion
AeroLand <= 1.6.6 - Unauthenticated Local File Inclusion
Testimonial Master <= 0.2.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Post Like Dislike <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Stumble! for WordPress <= 1.1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Yoco Payments <= 3.9.0 - Unauthenticated Arbitrary File Read
WP Widget Changer <= 1.2.5 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
AA Block country <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header
ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure
WP Enable WebP <= 1.0 - Authenticated (Author+) Arbitrary File Upload
Flashcard Plugin for WordPress <= 0.9 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.2 - Unauthenticated Limited Arbitrary File Upload
EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal
EduBlink Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion
Wellspring < 2.8 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.