Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Flipdish Ordering System <= 1.5.2 - Cross-Site Request Forgery to Settings Update
Login Redirect <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
My Default Post Content <= 0.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Rating <= 1.4 - Cross-Site Request Forgery
Rewrite <= 0.2.1 - Cross-Site Request Forgery
Key4ce osTicket Bridge <= 1.4.0 - Reflected Cross-Site Scripting
Top Bar <= 3.3 - Missing Authorization
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Custom Script Integration <= 2.1 - Cross-Site Request Forgery
Omnify <= 2.0.3 - Reflected Cross-Site Scripting
DICOM Support <= 0.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Weather Layer <= 4.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
OSS Upload <= 4.8.9 - Cross-Site Request Forgery
Secret Meta <= 1.2.1 - Reflected Cross-Site Scripting
MorningTime Lite <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
External image replace <= 1.0.8 - Cross-Site Request Forgery to Settings Update
Typekit plugin for WordPress <= 1.2.3 - Cross-Site Request Forgery
Upload Quota per User <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
sourceplay-navermap <= 0.0.2 - Missing Authorization
WordPress Admin Bar Improved <= 3.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Hotjar <= 0.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Replace Default Words <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
wA11y – The Web Accessibility Toolbox <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.