Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
wp_amaps <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sticky Button – Click to Chat <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Nature FlipBook WordPress Plugin <= 1.7 - Reflected Cross-Site Scripting
Sandbox <= 0.4 - Reflected Cross-Site Scripting
SendGrid for WordPress <= 1.4 - Missing Authorization
Incredible Font Awesome <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WpDevTool <= 0.1.1 - Reflected Cross-Site Scripting
Send to Twitter <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
AI Responsive Gallery Album <= 1.4 - Missing Authorization
wp-flickr-press <= 2.6.4 - Reflected Cross-Site Scripting
Easy Filter <= 1.10 - Reflected Cross-Site Scripting
Real Seguro Viagem <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Bauernregeln <= 1.0.1 - Reflected Cross-Site Scripting
Essay Wizard (wpCRES) <= 1.0.6.4 - Reflected Cross-Site Scripting
Email on Publish <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DF Draggable <= 1.13.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Contexto <= 1.0 - Reflected Cross-Site Scripting
WP-NOTCAPTCHA <= 1.3.1 - Reflected Cross-Site Scripting
WP-Player <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Send to a Friend Addon <= 1.4.1 - Reflected Cross-Site Scripting
Chatter <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Coronavirus (COVID-19) Outbreak Data Widgets <= 1.1.1 - Reflected Cross-Site Scripting
WOOEXIM – WooCommerce Export Import Plugin <= 5.0.0 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.