Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Email Users <= 4.7.5 - Reflected Cross Site Scripting
Easy Pie Coming Soon < 1.0.1 - Cross-Site Scripting
WP Symposium < 15.8 - Blind SQL Injection
Email Subscribers & Newsletters < 2.9.1 - Cross-Site Scripting
Bookmarkify <= 1.1.3 - Cross-Site Request Forgery to Cross-Site Scripting
WP Symposium <= 15.8 - Unauthenticated SQL Injection
Monetize <= 1.03 - Cross-Site Request Forgery to Cross-Site Scripting
MainWP Dashboard and MainWP Child <= 2.0.22 - Unspecified Vulnerability
Avenir-soft Direct Download <= 1.0 - Cross-Site Scripting
Qtranslate Slug <= 1.1.16 - Reflected Cross-Site Scripting
Ninja Forms Contact Form <= 2.9.21 - Reflected Cross-Site Scripting
WordPress Core < 4.2.4 - SQL Injection
WordPress Core < 4.2.4 - Cross-Site Scripting in Theme Preview
WordPress Core < 4.2.4 - Cross-Site Scripting via Widget Title
WordPress Core < 4.2.4 - Timing Side-Channel Attack
Job Manager - < 0.7.23 - Stored Cross-Site Scripting
WordPress Core < 4.2.4 - Cross-Site Request Forgery to Post Lockage
WordPress Core < 4.2.4 - Stored Cross-Site Scripting via accessibility-helper Title
YITH Maintenance Mode <= 1.1.4 - Reflected Cross-Site Scripting
wordpress vertical image slider plugin < 1.2 - Cross-Site Request Forgery
Simple Image Manipulator <= 1.0 - Remote File Download
Livefyre Comments 3 <= 4.1.4 - Stored Cross-Site Scripting
Content Grabber <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.