Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Greenmart <= 4.2.3 - Unauthenticated Local File Inclusion
Blogvy <= 1.0.7 - Unauthenticated Local File Inclusion
CTUsers <= 1.0.0 - Unauthenticated Local File Inclusion
SERPed.net <= 4.6 - Unauthenticated Local File Inclusion
Litho <= 3.0 - Unauthenticated Arbitrary File Deletion
Blogmine <= 1.1.7 - Unauthenticated Local File Inclusion
Katerio - Magazine <= 1.5.1 - Unauthenticated Local File Inclusion
Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Unauthenticated Local File Inclusion
SNS Vicky <= 3.7 - Unauthenticated Local File Inclusion
Domnoo <= 1.49 - Unauthenticated Local File Inclusion
Magze <= 1.0.9 - Unauthenticated Local File Inclusion
Elessi <= 6.3.9 - Reflected Cross-Site Scripting
Blogty <= 1.0.11 - Unauthenticated Local File Inclusion
Blogprise <= 1.0.9 - Unauthenticated Local File Inclusion
CityGov <= 1.9 - Unauthenticated Local File Inclusion
Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter
Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
Umbraco CMS disclosure of configured password requirements
SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute
Homey <= 2.4.5 - Unauthenticated SQL Injection
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Deletion
Zikzag Core <= 1.4.5 - Unauthenticated Local File Inclusion
WP SmartPay <= 2.7.13 - Authenticated (Subscriber+) Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.