Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
django-epiceditor vulnerable to XSS in form field
Mail Masta <= 1.0 - SQL Injection via subscriber_email parameter
PICA Photo Gallery <= 1.0 - SQL Injection
Alta User Points - SQL Injection
Vehicle Manager - SQL Injection
Real Estate Manager - SQL Injection
DTracker <= 1.5 - SQL Injection
DTracker <= 1.5 - Authorization Bypass
DTracker <= 1.5 - SQL Injection
MultiTier - SQL Injection
BookLibrary - SQL Injection
MediaLibrary - SQL Injection
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.30 - HTML Injection
Wp2android <= 1.1.4 - Arbitrary File Upload
Mobile App Builder by WapPress <= 1.05 - Arbitrary File Upload
Street Guesser - SQL Injection
UserExtranet - SQL Injection
JO Facebook gallery - SQL Injection
WordPress Core < 4.7.3 - Arbitrary File Deletion
WordPress Core < 4.7.3 - Cross-Site Scripting via Taxonomy names
WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This
WordPress Core < 4.7.3 - Cross-Site Scripting via Media Metadata
WordPress Core < 4.7.3 - Bypass URL Validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.