Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Custom Post <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Shortcode Buttons <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Block Collection for You – WP Block Pack <= 1.1.6 - Reflected Cross-Site Scripting
OrangeBox <= 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
all-in-one-box-login <= 2.0.1 - Reflected Cross-Site Scripting
Smallerik File Browser <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Social2Blog <= 0.2.990 - Reflected Cross-Site Scripting
Formatted post <= 1.01 - Reflected Cross-Site Scripting
QMean – WordPress Did You Mean and Search Suggestion Like Google <= 2.0 - Reflected Cross-Site Scripting
Menus Plus+ <= 1.9.6 - Authenticated (Subscriber+) SQL Injection
Advanced Angular Contact Form <= 1.1.0 - Reflected Cross-Site Scripting
WP Contest <= 1.0.0 - Reflected Cross-Site Scripting
DZS Ajaxer Lite – Ajaxify Your WordPress Site and Comment <= 1.04 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Google Map With Fancybox <= 2.1.0 - Reflected Cross-Site Scripting
CNZZ&51LA for WordPress <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Store Locator for WordPress with Google Maps – LotsOfLocales <= 3.98.10 - Unauthenticated Local File Inclusion
Content Security Policy Pro <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Post & Page Notes <= 0.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tagesteller / Mittagsmenü <= 1.1 - Reflected Cross-Site Scripting
GMap Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ImageMeta <= 1.1.2 - Reflected Cross-Site Scripting
First Comment Redirect <= 1.0.3 - Reflected Cross-Site Scripting
Auto FTP <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.