Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
WP Multistore Locator <= 2.5.2 - Unauthenticated SQL Injection
STEdb Forms <= 1.0.4 - Authenticated (Administrator+) SQL Injection
include-file <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting
SpeakPipe <= 0.2 - Cross-Site Request Forgery
Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
دکمه، شبکه اجتماعی خرید <= 2.0.6 - Authenticated (Administrator+) SQL Injection
Contact Form 7 Material Design <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ANAC XML Render <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GMO Font Agent <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
AdSense Privacy Policy <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Event Ticketing <= 1.3.4 - Reflected Cross-Site Scripting
Related Posts via Categories <= 2.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CopyLink <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Product Stickers for Woocommerce <= 1.9.0 - Reflected Cross-Site Scripting
BMo Expo <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Beautiful Link Preview <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Image Captcha <= 1.2 - Cross-Site Request Forgery
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Easy Page Transition <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Lightview Plus <= 3.1.3 - Reflected Cross-Site Scripting
DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure
WP Social Widget <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.