Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
qTranslate <= 2.5.39 - Cross-Site Request Forgery
Unite Horizontal Carousel
WordPress Core < 3.5.2 - Missing Authorization Checks
WordPress Core < 3.5.2 - Sensitive Information Disclosure
WordPress Core < 3.5.2 - Cross-Site Scripting
WordPress Core <= 3.5.1 - Denial of Service via wp-postpass cookie
WordPress Core < 3.5.2 - Server Side Request Forgery
WordPress Core < 3.5.2 - Cross-Site Scripting via Multiple Vectors
WordPress Core <= 3.5.1 - Content-Spoofing Attacks
WordPress Core < 3.5.2 - XXE Injection
Slash WP (All Versions) - Multiple Vulnerabilities
Ultimate WordPress Auction Plugin < 1.0.1 - Cross-Site Request Forgery
WordPress Gallery Plugin – NextGEN Gallery <= 1.9.12 - Arbitrary File Upload
JobRoller <= 1.7.4 - Reflected Cross-Site Scripting
Ambience (Unspecified Versions) - Cross-Site Scripting
WP Maintenance Mode <= 1.8.7 - Missing Authorization Checks & Cross-Site Request Forgery
AntiVirus < 1.1 - Full Path Disclosure
Master Password
Jinc
CiviCRM
flashChart Content Plugin
Exploit Scanner <= 1.3.3 - Full Path Disclosure
Jinc
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.