Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Generate Post Thumbnails <= 0.8 - Cross-Site Request Forgery
My Bootstrap Menu <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Flickr set slideshows <= 0.9 - Authenticated (Contributor+) SQL Injection
Hester <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Include URL <= 0.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Driving Directions <= 1.4.4 - Reflected Cross-Site Scripting
Visual Text Editor <= 1.2.1 - Authenticated (Contributor+) Remote Code Execution
Simple Optimizer <= 1.2.7 - Cross-Site Request Forgery
Web Directory Free <= 1.7.6 - Unauthenticated SQL Injection
RainbowNews <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Cackle <= 4.33 - Cross-Site Request Forgery
AI Preloader <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
IG Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Colorful Tag Cloud <= 2.0.1 - Reflected Cross-Site Scripting
WP Featured Entries <= 1.0 - Authenticated (Contributor+) SQL Injection
LH OGP Meta <= 1.73 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Build <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hacklog Remote Image Autosave <= 2.1.0 - Cross-Site Request Forgery
Info Boxes Shortcode and Widget <= 1.15 - Cross-Site Request Forgery
jQuery Dropdown Menu <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GP Back To Top <= 3.0 - Cross-Site Request Forgery
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.