Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Powie's pLinks PagePeeker <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
radSLIDE <= 2.1 - Missing Authorization
Category Custom Fields <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Loops <= 1.0.2 - Reflected Cross-Site Scripting
Magic Google Maps <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Login Attempt Log <= 1.3 - Reflected Cross-Site Scripting
Jet Skinner for BuddyPress <= 1.2.5 - Reflected Cross-Site Scripting
Network-Favorites <= 1.1 - Reflected Cross-Site Scripting
Contact Form 7 – Paystack Add-on <= 1.2.3 - Reflected Cross-Site Scripting
LJ Custom Menu Links <= 2.5 - Reflected Cross-Site Scripting
WP Meetup <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Copy Move Posts <= 1.6 - Missing Authorization
Compare Ninja <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Custom Google Search <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP VTiger Synchronization <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Data Dash <= 1.2.3 - Reflected Cross-Site Scripting
Awesome Hooks <= 1.0.1 - Reflected Cross-Site Scripting
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting
Ajax WP Query Search Filter <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSVP ME <= 1.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
AW WooCommerce Kode Pembayaran <= 1.1.4 - Reflected Cross-Site Scripting
Curated Search <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.