Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
WordPress Core < 4.2.1 - Cross-Site Scripting via Comments
WPS Hide Login <= 1.0 - Cross-Site Request Forgery
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read
Resend Welcome Email <= 1.0.1 - Reflected Cross-Site Scripting
FeedWordPress < 2015.0426 - Cross-Site Scripting
"J-ClassifiedsManager" by CMSjunkie
WooCommerce Amazon Affiliates < 9.0.2.16 - Unauthenticated Arbitrary File Upload
Social Media Share Buttons | MashShare < 2.3.1 - Information Disclosure
The7 — Website and eCommerce Builder for WordPress <= 2.1.0 - Reflected Cross-Site Scripting
WP Google Map Plugin < 2.3.7 - Reflected Cross-Site Scripting
QAEngine <= 1.4 - Privilege Escalation
"Simple Email Form" by unlikelysource.com - 1.8.5 and below
WooSidebars <= 1.4.1 - Reflected Cross-Site Scripting
Mark User as Spammer <= 1.0.1 - Reflected Cross-Site Scripting
Add Link to Facebook <= 1.215 - Authenticated Stored Cross-Site Scripting
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload
Option Tree <= 2.5.3 - Cross-Site Scripting
WooFramework Branding <= 1.0.1 - Reflected Cross-Site Scripting
CM Tooltip Glossary – Better SEO and UEX for your WP site <= 3.1.3 - Reflected Cross-Site Scripting
WooFramework Tweaks <= 1.0.1 - Reflected Cross-Site Scripting
Icons for Features <= 1.0.0 - Reflected Cross-Site Scripting
WooSidebars Sidebar Manager Converter <= 1.1.1 - Reflected Cross-Site Scripting
Ultimate Product Catalog < 3.1.3 - Multiple Vulnerabilities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.