Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Ultimate Security Checker <= 4.2 - Cross-Site Request Forgery
WP Database Optimizer <= 1.2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
ShowTime Slideshow <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Supersized <= 3.1.6 - Cross-Site Request Forgery
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Local File Inclusion
Text Selection Color <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Paid Member Subscriptions <= 2.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Syntax <= 1.2 - Authenticated (Author+) Regex Denial of Service
Page Takeover <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Leaky Paywall <= 4.21.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slider by BestWebSoft <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Simple Trackback Disabler <= 1.4 - Cross-Site Request Forgery
Login Alert <= 0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Kento WordPress Stats <= 1.1 - Reflected Cross-Site Scripting
Duplicate Page and Post <= 1.0 - Authenticated (Contributor+) SQL Injection
YouTube SimpleGallery <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Visitor Counter <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Usermaven <= 1.2.1 - Cross-Site Request Forgery
Multiple Shipping And Billing Address For Woocommerce <= 1.5 - Unauthenticated PHP Object Injection
KK I Like It <= 1.7.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP-OGP <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Flatty <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Terms of Use <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.