Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWR Price List Manager For Woocommerce <= 1.0.8 - Missing Authorization to Arbitrary Content Deletion
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Videos <= 1.0.5 - Reflected Cross-Site Scripting
Rich Text Editor <= 1.0.1 - Missing Authorization
Residential Address Detection <= 2.5.4 - Missing Authorization
Team Rosters <= 4.7 - Reflected Cross-Site Scripting
MediaView <= 1.1.2 - Reflected Cross-Site Scripting
Social Share And Social Locker <= 1.4.1 - Reflected Cross-Site Scripting
Tiger <= 2.0 - Reflected Cross-Site Scripting
PeproDev CF7 Database <= 2.0.0 - Unauthenticated Stored Cross-Site Scripting
Social Share And Social Locker <= 1.4.2 - Unauthenticated SQL Injection
WP Video Playlist <= 1.1.2 - Missing Authorization to Unauthenticated Settings Update
Gravel <= 1.6 - Reflected Cross-Site Scripting
Botnet Attack Blocker <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Advanced Typekit <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload
Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection
Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter
Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation
Video Url <= 1.0.0.3 - Reflected Cross-Site Scripting
wp Time Machine <= 3.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Advanced Search by My Solr Server <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Shopper Approved Reviews 2.0 - 2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.