Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 108
Reset filtersPhoto Gallery by Ays - Responsive Image Gallery <= 4.4.3 - Authenticated Blind SQL Injections
Photo Gallery <= 1.5.66 - Authenticated Stored Cross-Site Scripting via Gallery Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting <= 1.5.68 - Reflected Cross-Site Scripting
Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.68 - Cross-Site Scripting
Photo Gallery <= 1.5.67 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.54 - SQL Injection via bwg_search_x Parameter
Photo Gallery by 10Web <= 1.5.45 - Multiple Cross-Site Scripting Issues
Social Photo Gallery <= 1.0 - Remote Code Execution
Photo Gallery by 10Web <= 1.5.34 - Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.34 - SQL Injection
Photo Gallery by 10Web <= 1.5.34 - Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.30 - SQL Injection
Photo Gallery by 10Web <= 1.5.24 - Authenticated Local File Inclusion
Photo Gallery by 10Web <= 1.5.22 - Authenticated Cross-Site Scripting
Photo Gallery by 10Web <= 1.3.66 - Cross-Site Scripting
Photo Gallery by 10Web <= 1.3.50 - Authenticated SQL Injection via tag_id Parameter
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
Photo Gallery by 10Web <= 1.3.37 - Authenticated SQL Injection
PICA Photo Gallery <= 1.0 - SQL Injection
Photo Gallery by Ays – Responsive Image Gallery < 1.0.1 - SQL Injection
Simple Photo Gallery <= 1.8.0 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.