Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersUserbase Access Control <= 1.0 - Reflected Cross-Site Scripting
One Backend Language <= 1.0 - Reflected Cross-Site Scripting
WordPress Gallery Plugin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Redux Converter <= 1.1.3.1 - Reflected Cross-Site Scripting
Smooth Dynamic Slider <= 1.0 - Reflected Cross-Site Scriptign
Web Testimonials <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
LawPress – Law Firm Website Management <= 1.4.5 - Reflected Cross-Site Scripting
G Web Pro Store Locator <= 2.0.1 - Reflected Cross-Site Scripting
Easy Tweet Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gateway for Pasargad Bank <= 2.5.2 - Reflected Cross-Site Scripting
Yet Another Countdown <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woo Tuner <= 0.1.2 - Missing Authorization
FontAwesome.io ShortCodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cookie Consent & Autoblock for GDPR/CCPA <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
PayPal Marketing Solutions <= 1.2 - Missing Authorization
WPLingo – Forum Plugin <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
TinyMCE Extended Config <= 0.1.0 - Reflected Cross-Site Scripting
WordPress File Search <= 1.2 - Reflected Cross-Site Scripting
Admin Cleanup <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Ultimate Reviews FREE <= 1.0.2 - Reflected Cross-Site Scripting
Pit Login Welcome <= 1.1.5 - Reflected Cross-Site Scripting
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.