Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Wp EMember <= 10.6.5 - Cross-Site Request Forgery
SVG Block <= 1.1.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
If-So Dynamic Content Personalization <= 1.8.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Embed Peertube Playlist <= 1.07 - Authenticated (Editor+) Stored Cross-Site Scripting
SULly <= 4.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.42 - Authenticated (Author+) Stored Cross-Site Scripting
WordPress Plugin Tournamatch < 4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Shortcodes Ultimate Pro <= 7.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Image Photo Gallery Final Tiles Grid <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
SULly <= 4.3.0 - Cross-Site Request Forgery to Plugin Reset
Wp EMember <= 10.6.5 - Cross-Site Request Forgery to Bulk Delete
WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'login_pwd'
WP eMember <= 10.6.5 - Reflected Cross-Site Scripting via 'editrecord'
SULly <= 4.3 - Reflected Cross-Site Scripting
Product Enquiry for WooCommerce <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Index WP MySQL For Speed <= 1.4.17 - Reflected Cross-Site Scripting
Smart Image Gallery <= 1.0.18 - Cross-Site Request Forgery
Hostel <= 1.1.5.2 - Reflected Cross-Site Scripting
WP Affiliate Platform < 6.5.1 - Cross-Site Request Forgery to Profile Update
WP QuickLaTeX <= 3.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Affiliate Platform < 6.5.1 - Reflected Cross-Site Scripting via Banner Editing
Wp EMember <= 10.6.6 - Unauthenticated Stored Cross-Site Scripting
CM Email Registration Blacklist and Whitelist <= 1.4.8 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.