Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.3.3 - Cross-Site Scripting
Easy Digital Downloads - Quota < 1.2.5 - Cross-Site Scripting
WP Print Friendly <= 0.6 - Cross-Site Scripting
Easy Digital Downloads – Attach Accounts to Orders <= 2.0.1 - Reflected Cross-Site Scripting
Download Monitor <= 1.6.4 - Reflected Cross-Site Scripting
Jetpack <= 3.4.2 - Reflected Cross-Site Scripting
Taxonomy Switcher <= 1.0.3 - Reflected Cross-Site Scripting
Easy Digital Downloads – PDF Invoices < 1.0.4 - Cross-Site Scripting
Easy Digital Downloads – Software Licensing < 3.2.3 - Cross-Site Scripting
Download Monitor < 1.7.1 - Reflected Cross-Site Scripting
Easy Canadian Sales Taxes Add-On for iThemes Exchange < 1.1.0 - Reflected Cross-Site Scripting
UpdraftPlus WordPress Backup <= 1.9.6.3 - Cross-Site Scripting
Stripe Add-on for iThemes Exchange < 1.2.0 - Reflected Cross-Site Scripting
Age Verify <= 0.2.8 - Reflected Cross-Site Scripting
Lattice < 1.1.5 - Cross-Site Scripting
Crayon Syntax Highlighter 2.0 - 2.6.10 - Missing Authorization
Exchange Addon Table Rate Shipping < 1.1.0 - Cross-Site Scripting
iThemes Exchange < 1.12.0 - Cross-Site Scripting
iThemes Mobile < 1.2.8 - Reflected Cross-Site Scripting
Exchange Addon Invoices < 1.4.0 - Reflected Cross-Site Scripting
WordPress Core < 4.1.2 - Cross-Site Scripting via Ephox in Plupload
Broken Link Checker < 1.10.6 - Reflected Cross Site Scripting
Related Posts for WordPress < 1.8.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.