Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSimple Optimizer <= 1.2.7 - Cross-Site Request Forgery
Web Directory Free <= 1.7.6 - Unauthenticated SQL Injection
RainbowNews <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Cackle <= 4.33 - Cross-Site Request Forgery
AI Preloader <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
IG Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Colorful Tag Cloud <= 2.0.1 - Reflected Cross-Site Scripting
WP Featured Entries <= 1.0 - Authenticated (Contributor+) SQL Injection
LH OGP Meta <= 1.73 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Build <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hacklog Remote Image Autosave <= 2.1.0 - Cross-Site Request Forgery
Info Boxes Shortcode and Widget <= 1.15 - Cross-Site Request Forgery
jQuery Dropdown Menu <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GP Back To Top <= 3.0 - Cross-Site Request Forgery
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
SpatialMatch IDX <= 3.0.9 - Reflected Cross-Site Scripting
Custom Smilies <= 2.9.2 - Reflected Cross-Site Scripting
Rentals <= 3.13.1 - Cross-Site Request Forgery
Docpro <= 2.0.1 - Unauthenticated Local File Inclusion
Gravity 2 PDF <= 3.1.3 - Reflected Cross-Site Scripting
Are you robot google recaptcha for wordpress <= 2.2 - Reflected Cross-Site Scripting
ZenphotoPress <= 1.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.