Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersANAC XML Render <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GMO Font Agent <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
AdSense Privacy Policy <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Event Ticketing <= 1.3.4 - Reflected Cross-Site Scripting
Related Posts via Categories <= 2.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CopyLink <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Product Stickers for Woocommerce <= 1.9.0 - Reflected Cross-Site Scripting
BMo Expo <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Beautiful Link Preview <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Image Captcha <= 1.2 - Cross-Site Request Forgery
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Easy Page Transition <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Lightview Plus <= 3.1.3 - Reflected Cross-Site Scripting
DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure
WP Social Widget <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Map Contact <= 3.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Generate Post Thumbnails <= 0.8 - Cross-Site Request Forgery
My Bootstrap Menu <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Flickr set slideshows <= 0.9 - Authenticated (Contributor+) SQL Injection
Hester <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Include URL <= 0.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Driving Directions <= 1.4.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.