Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Feedweb < 1.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Kioskprox (Unkown Versions) - Cross-Site Scripting
DrawBlog < 0.81 - Cross-Site Request Forgery
Simple Fields < 1.2 - Cross-Site Request Forgery
WP FuneralPress <= 1.1.6 - Cross-Site Scripting
WP125 <= 1.4.9 - Cross-Site Request Forgery
Finalist (All Versions) - SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.55 - SQL Injection
L4 Shopping Cart Plugin < 8.1.1 - SQL Injection
MathJax-LaTeX < 1.2 - Cross-Site Request Forgery
BackupBuddy < 3.0 - Authentication Bypass
BackupBuddy < 3.0 - Authentication Bypass
BackupBuddy < 3.0 - Authentication Bypass
BackupBuddy <= 2.2.28 - Sensitive Information Disclosure
Felici Premium Magazine Theme <= 1.7 - Cross-Site Scripting
OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function
FAQs Manager <= 1.0 - Cross-Site Scripting
FAQs Manager <= 1.0 - Cross-Site Request Forgery
FAQs Manager <= 1.0 - SQL Injection
Occasions <= 1.1 - Cross-Site Request Forgery
o2s gallery <= 1.0 - Reflected Cross-Site Scripting
timelineoptinpro Plugin (All Versions) - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.