Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
WP Ultimate Reviews FREE <= 1.0.2 - Reflected Cross-Site Scripting
Pit Login Welcome <= 1.1.5 - Reflected Cross-Site Scripting
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Woo Store Mode <= 1.0.1 - Reflected Cross-Site Scripting
Cobwebo URL Plugin <= 1.0 - Reflected Cross-Site Scripting
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MyAnime Widget <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Kapost <= 2.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripting
CMC MIGRATE <= 0.0.3 - Reflected Cross-Site Scripting
Stars SMTP Mailer <= 1.7 - Reflected Cross-Site Scripting
StatPressCN <= 1.9.1 - Reflected Cross-Site Scripting
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting
Apply with LinkedIn buttons <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CBX Accounting & Bookkeeping <= 1.3.14 - Reflected Cross-Site Scripting
Find Content IDs <= 1.0 - Reflected Cross-Site Scripting
Powie's pLinks PagePeeker <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
radSLIDE <= 2.1 - Missing Authorization
Category Custom Fields <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Loops <= 1.0.2 - Reflected Cross-Site Scripting
Magic Google Maps <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.