Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
FontAwesome.io ShortCodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cookie Consent & Autoblock for GDPR/CCPA <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
PayPal Marketing Solutions <= 1.2 - Missing Authorization
WPLingo – Forum Plugin <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
TinyMCE Extended Config <= 0.1.0 - Reflected Cross-Site Scripting
WordPress File Search <= 1.2 - Reflected Cross-Site Scripting
Admin Cleanup <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Ultimate Reviews FREE <= 1.0.2 - Reflected Cross-Site Scripting
Pit Login Welcome <= 1.1.5 - Reflected Cross-Site Scripting
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Woo Store Mode <= 1.0.1 - Reflected Cross-Site Scripting
Cobwebo URL Plugin <= 1.0 - Reflected Cross-Site Scripting
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MyAnime Widget <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Kapost <= 2.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripting
CMC MIGRATE <= 0.0.3 - Reflected Cross-Site Scripting
Stars SMTP Mailer <= 1.7 - Reflected Cross-Site Scripting
StatPressCN <= 1.9.1 - Reflected Cross-Site Scripting
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting
Apply with LinkedIn buttons <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CBX Accounting & Bookkeeping <= 1.3.14 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.