Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Feed Them Social <= 1.6.9 - Reflected Cross-Site Scripting
Quasar - WordPress Theme with Animation Builder <= 1.9.2 - Authorization Bypass
Most Popular Posts Widget <= 0.8 - Authenticated (Admin+) SQL Injection
Feed Them Social <= 1.6.9 - Arbitrary Shortcode Execution
SpiderVPlayer< 1.5.5 - Reflected Cross-Site Scripting
WordPress Calls to Action < 2.2.8 - Unauthenticated Stored Cross-Site Scripting
Incoming Links < 0.9.10b - Stored Cross-Site Scripting
eXtplorer
Banner Effect Header < 1.2.8 - Cross-Site Scripting
PowerPress <= 6.0.0 - Cross-Site Scripting
WooCommerce <= 2.2.10 - Cross-Site Scripting
WPTouch < 3.7 - Open Redirect
Photo Gallery by 10Web <= 1.2.10 - Authenticated Cross-Site Scripting
Feedweb <= 3.0.10 - Missing Authorization
Geo Mashup < 1.8.3 - Cross-Site Scripting
Solidres previous to
WDSocialWidgets < 1.0.11 - Cross-Site Scripting
Acobot Live Chat & Contact Form <= 2.0 - Cross-Site Request Forgery and Cross-Site Scripting
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting
RedSteel (All Versions) - File Disclosure
Cart66 Lite :: WordPress Ecommerce <= 1.5.4 - Reflected Cross-Site Scripting
WordPress File Upload <= 2.4.6 - Arbitrary File Upload
Photo Gallery by 10Web <= 1.2.10 - Authenticated SQL Injection via asc_or_desc Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.