Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Send to Twitter <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
AI Responsive Gallery Album <= 1.4 - Missing Authorization
wp-flickr-press <= 2.6.4 - Reflected Cross-Site Scripting
Easy Filter <= 1.10 - Reflected Cross-Site Scripting
Real Seguro Viagem <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Bauernregeln <= 1.0.1 - Reflected Cross-Site Scripting
Essay Wizard (wpCRES) <= 1.0.6.4 - Reflected Cross-Site Scripting
Email on Publish <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DF Draggable <= 1.13.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Contexto <= 1.0 - Reflected Cross-Site Scripting
WP-NOTCAPTCHA <= 1.3.1 - Reflected Cross-Site Scripting
WP-Player <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Send to a Friend Addon <= 1.4.1 - Reflected Cross-Site Scripting
Chatter <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Coronavirus (COVID-19) Outbreak Data Widgets <= 1.1.1 - Reflected Cross-Site Scripting
WOOEXIM – WooCommerce Export Import Plugin <= 5.0.0 - Unauthenticated PHP Object Injection
Site Launcher <= 0.9.4 - Reflected Cross-Site Scripting
Mindmeister Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Custom Coming Soon <= 2.2 - Reflected Cross-Site Scripting
Bible Embed <= 0.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
melascrivi-plugin <= 1.4 - Reflected Cross-Site Scripting
Browser-Update-Notify <= 0.2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.