Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersDelete Comments By Status <= 2.1.1 - Unauthenticated Local File Inclusion
Visitor Details <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
WP Less Compiler <= 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Authors Autocomplete Meta Box <= 1.2 - Reflected Cross-Site Scripting
Staff Directory Plugin: Company Directory <= 4.3 - Unauthenticated Stored Cross-Site Scripting
User Role <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
BookPress – For Book Authors <= 1.2.7 - Missing Authorization
RJ Quickcharts <= 0.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
EP4 More Embeds <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Top Bar – PopUps – by WPOptin <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
UniTimetable <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Find Your Nearest <= 0.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Migrate Posts <= 1.0 - Reflected Cross-Site Scripting
SW Plus <= 2.1 - Reflected Cross-Site Scripting
WP Frontend Submit <= 1.1.0 - Reflected Cross-Site Scripting
Contact Us By Lord Linus <= 2.6 - Reflected Cross-Site Scripting
Fami Sales Popup <= 2.0.0 - Unauthenticated Local File Inclusion
Yahoo BOSS <= 0.7 - Reflected Cross-Site Scripting
WP Church Center <= 1.3.3 - Reflected Cross-Site Scripting
Callback Request <= 1.4 - Reflected Cross-Site Scripting
Meta Accelerator <= 1.0.4 - Reflected Cross-Site Scripting
Woocommerce osCommerce Sync <= 2.0.20 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.