Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMLL Audio Player MP3 Ajax <= 0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Goldstar <= 2.1.1 - Missing Authorization
EmailPress <= 1.0 - Reflected Cross-Site Scripting
Form To Online Booking <= 1.0 - Reflected Cross-Site Scripting
Blue Wrench Video Widget <= 2.1.0 - Reflected Cross-Site Scripting
Geotagged Media <= 0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GDReseller <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
SOCIAL.NINJA <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Extra Options – Favicons <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Youtube Video Grid | Youmax <= 1.9 - Reflected Cross-Site Scripting
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting
Cache Sniper for Nginx <= 1.0.4.2 - Missing Authorization
Mind3doM RyeBread Widgets <= 1.0 - Reflected Cross-Site Scripting
ReadMe Creator <= 1.0 - Reflected Cross-Site Scripting
Online Marksheet Creator : eMarksheet <= 5.4.3 - Reflected Cross-Site Scripting
DsgnWrks Twitter Importer <= 1.1.4 - Reflected Cross-Site Scripting
vcOS <= 1.4.0 - Reflected Cross-Site Scripting
Content Mirror <= 1.2 - Reflected Cross-Site Scripting
Cyber Slider <= 1.1 - Reflected Cross-Site Scripting
Simple Vertical Timeline <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-BlackCheck <= 2.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Authenticated (Administrator+) SQL Injection
Random Posts, Mp3 Player + ShareButton <= 1.4.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.