Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
filedownload < 1.4 - Blind SQL Injection
Sell Downloads <= 1.0.7 - Improper Input Validation
CP Image Store with Slideshow < 1.0.7 - Arbitrary File Download
MailCWP <= 1.100 - Arbitrary File Upload
CP Image Store with Slideshow < 1.0.6 - Arbitrary File Download
CP Contact Form with PayPal < 1.1.6 - SQL Injection
MailCWP <= 1.100 - Arbitrary File Upload
WR ContactForm < 1.1.10 - SQL Injection
CP Contact Form with PayPal < 1.1.6 - Cross-Site Request Forgery
WP Statistics < 9.4.1 - Authenticated Blind SQL Injection
GD bbPress Attachments < 2.3 - Directory Traversal
SEO SearchTerms Tagging 2 <=1.535 - SQL Injection
Pretty Links – Link Management, Branding, Tracking & Sharing Plugin <= 1.6.7 - SQL Injection
searchterms-tagging-2 <= 1.535 - Reflected Cross-Site Scripting
YOP Poll <= 5.7.3 - Reflected Cross-Site Scripting
Swim Team < 1.45.1085 - Directory Traversal
GD bbPress Attachments < 2.3 - Reflected Cross-Site Scripting
IBS Mappro < 1.0 - Directory Traversal
Child Theme Creator by Orbisius <= 1.2.7 - Arbitrary File Write
Smart Manager For WooCommerce < 3.9.7 - Unauthenticated SQL Injection
WP Shop < 3.4.3.16 - SQL Injection
Awesome Filterable Portfolio < 1.9 - Blind SQL Injection
Floating Social Bar < 1.1.7 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.