Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersDropdown Content <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LSD Custom taxonomy and category meta <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Flickr Shortcode Importer <= 2.2.3 - Authenticated (Administrator+) PHP Object Injection
WP Customize Login Page <= 1.6.5 - Missing Authorization
Carousel-of-post-images <= 1.07 - Authenticated (Contributor+) Stored Cross-Site Scripting
occupancyplan <= 1.0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Twitter Card Generator <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Vasaio QR Code <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tooltip <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Call Now PHT Blog <= 2.4.1 - Cross-Site Request Forgery
Milat jQuery Automatic Popup <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-site Scripting
Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions
GTDB Guitar Tuners <= 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Wp Image Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bulk Assign Linked Products For WooCommerce <= 2.1 - Missing Authorization
Inline Text Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-reCAPTCHA-bp <= 4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
External Markdown <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
All in One Time Clock Lite <= 1.3.325 - Cross-Site Request Forgery
WP Custom Post Popup <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Modern Polls <= 1.0.10 - Cross-Site Request Forgery
Peekaboo <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.