Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWordPress Core & WordPress MU < 2.8.1 - Full Path Disclosure
WordPress Core < 2.8.4 - Forced Password Reset
WordPress Core < 2.8.3 - Authorization Bypass
WordPress Core < 2.8.3 - Missing Authorization
Google Analyticator <= 5.2 - Cross-Site Scripting
WordPress Core <= 2.8.1 - Cross-Site Scripting
my-category-order <= 2.8.7 - SQL Injection
WordPress Core & WordPress MU < 2.8.1 - Username Enumeration
WordPress Core <= 2.8 - Sensitive Information Disclosure
WordPress Core & WordPress MU < 2.8.1 - Username Enumeration
Related Sites <= 2.2 - SQL Injection
DM Albums <= 1.9.2 - Remote File Inclusion
FireStats <1.6.2 - SQL Injection
Photoracer Plugin <= 1.0 - SQL Injection
FireStats < 1.6.2 - Remote File Inclusion
WordPress Core < 2.8 - Sensitive Information Disclosure
Lytebox <= 1.3 - Local File Inclusion
WP Syntax < 0.9.10 - Remote Code Execution
fMoblog <= 2.1 - SQL Injection
WordPress MU < 2.7 - Cross-Site Scripting
WordPress Core < 2.6.5 - Cross-Site Scripting
WordPress Core < 2.8.1 - Open Redirect
Page Flip Image Gallery <= 0.2.2 - Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.