Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWeaver Themes Shortcode Compatibility <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bonjour Bar <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
CarZine <= 1.4.6 - Reflected Cross-Site Scripting
my white <= 2.0.8 - Reflected Cross-Site Scripting
UltraLight <= 1.2 - Reflected Cross-Site Scripting
WP Query Creator <= 1.0 - Reflected Cross-Site Scripting
Tuaug4 <= 1.4 - Reflected Cross-Site Scripting
EMI Calculator <= 1.1 - Missing Authorization to Unauthenticated Settings Change
Related Post Shortcode <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ghostwriter <= 1.4 - Reflected Cross-Site Scripting
flashy <= 1.2.1 - Reflected Cross-Site Scripting
Tijaji <= 1.43 - Reflected Cross-Site Scripting
Small Package Quotes – Worldwide Express Edition <= 5.2.17 - Unauthenticated SQL Injection
LTL Freight Quotes – Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection
The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module
Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Webcamconsult <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode
WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Ultimate Member <= 2.9.1 - Unauthenticated SQL Injection
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.9.1 - Information Exposure
Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.