Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
ImageInject <= 1.18 - Authenticated (Admin+) Stored XSS
Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date
Workreap <= 2.6.3 - Insecure Direct Object Reference
WP Google Review Slider <= 11.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Mail Log <= 1.0.1 - Cross-Site Request Forgery
Sunshine Photo Cart <= 2.9.13 - Missing Authorization
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip
Sunshine Photo Cart <= 2.9.13 - Cross-Site Request Forgery
Bulk Delete Users by Email <= 1.2 - Reflected Cross-Site Scripting
Bulk Delete Users by Email <= 1.2 - Cross-Site Request Forgery
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
Post Teaser <= 4.1.5 - Missing Authorization
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying
Simple Basic Contact Form <= 20220207 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.