Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSidebar-Content from Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slider for Writers <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Image Switcher <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affiliate Tools Việt Nam <= 0.3.17 - Reflected Cross-Site Scripting
RSS News Scroller <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP krpano <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Charity-thermometer <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSVPMaker Volunteer Roles <= 1.5.1 - Reflected Cross-Site Scripting
Easy School Registration <= 3.9.8 - Reflected Cross-Site Scripting
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting
Custom CSS Addons <= 1.9.1 - Reflected Cross-Site Scripting
HSS Embed Streaming Video <= 3.23 - Reflected Cross-Site Scripting
Email to Download <= 3.1.0 - Reflected Cross-Site Scripting
FooGallery Captions <= 1.0.2 - Reflected Cross-Site Scripting
add custom google tag manager <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Stop Comment Spam <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Woo Update Variations In Cart <= 0.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
XLSXviewer <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
HyperComments <= 0.9.6 - Reflected Cross-Site Scripting
Ps Ads Pro <= 1.0.0 - Reflected Cross-Site Scripting
Lockets <= 0.999 - Reflected Cross-Site Scripting
Visit Site Link enhanced <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.