Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWPLingo – Forum Plugin <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
TinyMCE Extended Config <= 0.1.0 - Reflected Cross-Site Scripting
WordPress File Search <= 1.2 - Reflected Cross-Site Scripting
Admin Cleanup <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Ultimate Reviews FREE <= 1.0.2 - Reflected Cross-Site Scripting
Pit Login Welcome <= 1.1.5 - Reflected Cross-Site Scripting
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Woo Store Mode <= 1.0.1 - Reflected Cross-Site Scripting
Cobwebo URL Plugin <= 1.0 - Reflected Cross-Site Scripting
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MyAnime Widget <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Kapost <= 2.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripting
CMC MIGRATE <= 0.0.3 - Reflected Cross-Site Scripting
Stars SMTP Mailer <= 1.7 - Reflected Cross-Site Scripting
StatPressCN <= 1.9.1 - Reflected Cross-Site Scripting
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting
Apply with LinkedIn buttons <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CBX Accounting & Bookkeeping <= 1.3.14 - Reflected Cross-Site Scripting
Find Content IDs <= 1.0 - Reflected Cross-Site Scripting
Powie's pLinks PagePeeker <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.