Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMyCSS <= 1.1 - Cross-Site Request Forgery to Settings Update
NextCellent Gallery <= 1.9.35 - Authenticated (Admin+) Cross-Site Scripting
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 3.4.7 -Authentication Bypass via Password Reset Weakness
SAML Single Sign On – SAML SSO Login <= 4.9.20 - Reflected Cross-Site Scripting
WordPress Security <= 4.2 - Admin+ Stored Cross-Site Scripting
miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.16 - Unauthenticated Plugin Settings Reset
Qubely <= 1.7.8 - Missing Authorization
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.7 - Cross-Site Scripting
Nested Pages <= 3.1.20 - Stored Cross-Site Scripting
Login using WordPress Users (WP as SAML IDP) <= 1.13.2 - Authenticated (Admin+) Cross-Site Scripting
MiniOrange Limit Login Attempts <= 4.0.72 - Administrator+ Cross-Site Scripting
Modula Image Gallery <= 2.6.6 - Reflected Cross-Site Scripting
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.4 - Cross-Site Request Forgery to Cross-Site Scripting
Simple Single Sign On <= 4.1.1 - Insecure OAuth Implementation to Authentication Bypass
Currency Switcher for WordPress <= 1.0.3 - Reflected Cross-Site Scripting
Image Gallery – Grid Gallery <= 1.1.1 - Stored Cross-Site Scripting
Easy Pricing Tables <= 3.2.0 - Reflected Cross-Site Scripting
Browser and Operating System Finder <= 1.2 - Missing Authorization
core plugin for kitestudio themes <= 2.2.1 - Reflected Cross-Site Scripting
My Content Management <= 1.7.1 - Cross-Site Scripting
Trade Runner <= 3.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.