Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
WordPress Gallery Plugin – NextGEN Gallery <= 1.5.1 - Cross-Site Scripting
Copperleaf Photolog <= 0.16- SQL injection
WordPress Core < 2.9.2 - Authorization Bypass
Pyrmont V2 <= 2.0.7 - SQL Injection
WordPress Core <= 2.8.5 - Arbitrary File Upload
WordPress Core <= 2.8.5 - Cross-Site Scripting
WP-Cumulus <= 1.22 - Cross-Site Scripting via tagcloud
WP-Cumulus <= 1.20 - Sensitive Information Exposure
Various Affected Software (Various Versions) - Arbitrary File Upload
WordPress Core <= 2.8.4 - Denial of Service
WP Forum <= 2.3 - Multiple SQL Injections
WP Cumulus < 1.22 - Cross-Site Scripting
WordPress Core & WordPress MU < 2.8.1 - Full Path Disclosure
Buildbot vulnerable to cross-site scripting
Buildbot Cross-site scripting (XSS) vulnerability
WordPress Core < 2.8.4 - Forced Password Reset
WordPress Core < 2.8.3 - Authorization Bypass
WordPress Core < 2.8.3 - Missing Authorization
Google Analyticator <= 5.2 - Cross-Site Scripting
WordPress Core <= 2.8.1 - Cross-Site Scripting
my-category-order <= 2.8.7 - SQL Injection
WordPress Core & WordPress MU < 2.8.1 - Username Enumeration
WordPress Core <= 2.8 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.