Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWp-Scribd-List <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Copyright Safeguard Footer Notice <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WpF Ultimate Carousel <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Password Protect Plugin for WordPress <= 0.8.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Push Notification for Post and BuddyPress <= 2.11 - Missing Authorization to Unauthenticated Settings Update
WP2APP <= 2.6.2 - Reflected Cross-Site Scripting
WP-Clap <= 1.5 - Reflected Cross-Site Scripting
SEOReseller Partner <= 1.3.15 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Anonymize Links <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Quote me <= 1.0 - Reflected Cross-Site Scripting
Contact Form 7 – CCAvenue Add-on <= 1.0 - Reflected Cross-Site Scripting
Content Planner <= 1.0 - Reflected Cross-Site Scripting
Event Countdown Timer Plugin by TechMix <= 1.4 - Reflected Cross-Site Scripting
WP Cookies Alert <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Popliup – WordPress Popup Plugin <= 1.1.1 - Authenticated (Subscriber+) Local File Inclusion
Sur.ly <= 3.0.3 - Missing Authorization
Responsivity <= 0.0.6 - Reflected Cross-Site Scripting
Envato Affiliater <= 1.2.4 - Reflected Cross-Site Scripting
Shabbos and Yom Tov <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Local Shipping Labels for WooCommerce <= 1.0.0 - Reflected Cross-Site Scripting
WP Service Payment Form With Authorize.net <= 2.6.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Isolved Talent Acquisition <= 1.3.9 - Reflected Cross-Site Scripting
ResAds <= 2.0.5 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.