Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Realty by BestWebSoft < 1.1.0 - Reflected Cross-Site Scripting
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.0.31 - Arbitrary Wordpress Shortcode Injection
Rating by BestWebSoft < 0.2 - Reflected Cross-Site Scripting
PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website <= 1.1.0 - Reflected Cross-Site Scripting
Error Log Viewer by BestWebSoft < 1.0.6 - Reflected Cross-Site Scripting
Ultimate Member <= 1.3.83 - Shortcode Injection
Help Center by BestWebSoft < 0.1.5 - Reflected Cross-Site Scripting
BestWebSoft's LinkedIn < 1.0.5 - Cross-Site Scripting
Social Buttons Pack by BestWebSoft < 1.1.1 - Reflected Cross-Site Scripting
Rimons Twitter Widget <= 1.2.4 - Cross-Site Scripting
Ultimate Addons for WPBakery <= 3.16.11 - Stored Cross-Site Scripting
RSS Includes Pages <= 3.6 - Cross-Site Scripting
Download PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin <= 1.9.3 - Cross-Site Scripting
Easy WP SMTP <= 1.2.4 - Cross-Site Scripting
Htaccess by BestWebSoft – WordPress Website Access Control Plugin <= 1.7.5 - Reflected Cross-Site Scripting
Real-Time Find and Replace <= 3.8 - Cross-Site Scripting
Add Any Extension to Pages <= 1.3 - Cross-Site Scripting
Enhanced Admin Plugin < 1.16 - Reflected Cross-Site Scripting
WP Statistics <= 12.0.4 - Stored Cross-Site Scripting
Analytics <= 1.7.0 - Multiple Cross-Site Scripting
Captcha < 4.3.0 - Reflected Cross-Site Scripting
Help Center by BestWebSoft <= 1.0.4 - Cross-Site Scripting
Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft < 1.2.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.