Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Background animation blocks <= 2.1.5 - Unauthenticated Local File Inclusion
WordPress Custom Sidebar <= 2.3 - Authenticated (Contributor+) SQL Injection
amr personalise <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Sidebar-Content from Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slider for Writers <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Image Switcher <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affiliate Tools Việt Nam <= 0.3.17 - Reflected Cross-Site Scripting
RSS News Scroller <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP krpano <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Charity-thermometer <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSVPMaker Volunteer Roles <= 1.5.1 - Reflected Cross-Site Scripting
Easy School Registration <= 3.9.8 - Reflected Cross-Site Scripting
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting
Custom CSS Addons <= 1.9.1 - Reflected Cross-Site Scripting
HSS Embed Streaming Video <= 3.23 - Reflected Cross-Site Scripting
Email to Download <= 3.1.0 - Reflected Cross-Site Scripting
FooGallery Captions <= 1.0.2 - Reflected Cross-Site Scripting
add custom google tag manager <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Stop Comment Spam <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Woo Update Variations In Cart <= 0.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
XLSXviewer <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
HyperComments <= 0.9.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.