Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Mage Front End Forms <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Postcasa Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Hola Free Video Player <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rig Elements For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Brand my Footer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
wp_automatic_widget <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Plenigo <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mobile Kiosk <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
OS Pricing Tables <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload
Faltu Testimonial Rotator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Text Advertisements <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Contest <= 1.0.0 - Authenticated (Contributor+) SQL Injection
Social button <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Parallaxer <= 1.00 - Authenticated (Contributor+) Stored Cross-Site Scripting
scrollup <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Geoportail Shortcode <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ekiline Block Collection <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stylish Internal Links <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
yPHPlista <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.