Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersUpload.am File Hosting VPN <= 1.0.0 - Authenticated (Contributor+) Arbitrary Options Disclosure
Custom Post Type Attachment <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ivory Search <= 5.5.12 - Missing Authorization
Image&Video FullScreen Background <= 1.6.7 - Authenticated (Contributor+) SQL Injection
LBG Zoominoutslider <= 5.4.4 - Authenticated (Contributor+) SQL Injection
Greenify <= 2.2 - Unauthenticated Local File Inclusion
Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion
Referral Link Tracker <= 1.1.4 - Missing Authorization
User Avatar - Reloaded <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Geo <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
BuddyPress <= 14.3.4 - Missing Authorization
Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
WP Popup Builder <= 1.3.8 - Unauthenticated Information Exposure
Popular Posts by Webline <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Links shortcode <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Microdata <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Image shrinker <= 1.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending
cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.