Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Post & Page Notes <= 0.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tagesteller / Mittagsmenü <= 1.1 - Reflected Cross-Site Scripting
GMap Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ImageMeta <= 1.1.2 - Reflected Cross-Site Scripting
First Comment Redirect <= 1.0.3 - Reflected Cross-Site Scripting
Auto FTP <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Free MailClient FMC <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Customizable Captcha and Contact Us <= 1.0.2 - Reflected Cross-Site Scripting
Stray Random Quotes <= 1.9.9 - Reflected Cross-Site Scripting
Killer Theme Options <= 2.0 - Reflected Cross-Site Scripting
WP SpaceContent <= 0.4.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Horizontal Line Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Post Category Notifications <= 1.0 - Reflected Cross-Site Scripting
Image Gallery Box by CRUDLab <= 1.0.3 - Authenticated (Subscriber+) Local File Inclusion
Annie <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hotspots Analytics <= 4.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Great Firewords of China <= 1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Annie <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Page Health-O-Meter <= 2.0 - Reflected Cross-Site Scripting
Multi Uploader for Gravity Forms <= 1.1.3 - Unauthenticated Arbitrary File Upload
Preloader Quotes <= 1.0.0 - Reflected Cross-Site Scripting
Download, Downloads – WordPress Download plugin By Edmon <= 1.4.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.