Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersTheme My Ontraport Smartform <= 1.2.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Twitter Post <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP-HR Manager: The Human Resources Plugin for WordPress <= 3.1.0 - Reflected Cross-Site Scripting
Chamber Dashboard Business Directory <= 3.3.10 - Missing Authorization
MDC YouTube Downloader <= 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tab My Content <= 1.0.0 - Reflected Cross-Site Scripting
MACME <= 1.2 - Reflected Cross-Site Scripting
AlT Report <= 1.12.0 - Reflected Cross-Site Scripting
WordPress Graphs & Charts <= 2.0.8 - Missing Authorization
MFPlugin <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Len Slider <= 2.0.11 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Group category creator <= 1.3.0.3 - Reflected Cross-Site Scripting
Background animation blocks <= 2.1.5 - Unauthenticated Local File Inclusion
WordPress Custom Sidebar <= 2.3 - Authenticated (Contributor+) SQL Injection
amr personalise <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Sidebar-Content from Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slider for Writers <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Image Switcher <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affiliate Tools Việt Nam <= 0.3.17 - Reflected Cross-Site Scripting
RSS News Scroller <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP krpano <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Charity-thermometer <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSVPMaker Volunteer Roles <= 1.5.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.