Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
WA Form Builder <= 1.1 - SQL Injection
Responsive Lightbox & Gallery <= 1.7.1 - Cross-Site Scripting
WP Vault <= 0.8.6.6 - Local File Inclusion
Insert Html Snippet <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Product Catalog 8 <= 1.2.0 - SQL Injection
Kunena - XSS (Cross Site Scripting)
Image Gallery - Responsive Photo Gallery < 2.0.6 - Authenticated Stored Cross-Site Scripting
Platform 4 <= 1.1.4 - Cross-Site Request Forgery
Csv2WPeC Coupon <= 1.1 - Arbitrary File Upload
Olimometer < 2.57 - SQL Injection
Wp-D3 < 2.4.1 - Cross-Site Request Forgery
Vospari Forms < 1.4 - Reflected Cross-Site Scripting
Shortcodes by Angie Makes < 2.07 - Authenticated Stored Cross-Site Scripting
Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Post Indexer <= 3.0.6.1 - PHP Object Injection
BBS e-Franchise < 1.1.4 - SQL Injection
Post Indexer <= 3.0.6.1 - Authenticated (Super Admin+) SQL Injection
Relevanssi Premium < 1.14.6.1 - SQL Injection
NextGen Gallery <= 2.1.56 - Remote File Inclusion
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion & SQL injection
Lightbox < 1.6.8 - Stored Cross-Site Scripting
Gallery - Video Gallery and YouTube Gallery <= 2.0.3 - Cross-Site Request Forgery
WP eCommerce < 3.11.4 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.