Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersLimit Max IPs Per User <= 1.5 - Reflected Cross-Site Scripting
Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more <= 1.4.0 - Cross-Site Request Forgery
Watu Quiz <= 3.4.2 - Reflected Cross-Site Scripting
ShortPixel Adaptive Images <= 3.10.0 - Missing Authorization
JS Job Manager <= 2.0.2 - Authenticated Insecure Direct Object Reference
Cache control by Cacholong <= 5.4.1 - Cross-Site Request Forgery
Eventbee RSVP Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Nemesis All-in-One <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
JS Job Manager <= 2.0.2 - Missing Authorization
pCloud Backup <= 1.0.1 - Missing Authorization
Bulk Fields Editor <= 1.8.0 - Missing Authorization
UPC/EAN/GTIN Code Generator <= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Webling <= 3.9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Pearl <= 1.3.9 - Missing Authorization
Frizzly <= 1.1.0 - Reflected Cross-Site Scripting
Piotnet Forms <= 1.0.30 - Authenticated (Author+) Stored Cross-Site Scripting
WebberZone Snippetz <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Magical Blocks <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
JobBoard Job listing <= 1.2.7 - Missing Authorization
Delete Post Revision <= 1.1 - Reflected Cross-Site Scripting
Follow Us Badges <= 3.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ship Per Product <= 2.1.0 - Missing Authorization
Mobile App Canvas <= 3.8.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.