Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersCobwebo URL Plugin <= 1.0 - Reflected Cross-Site Scripting
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MyAnime Widget <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Kapost <= 2.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripting
CMC MIGRATE <= 0.0.3 - Reflected Cross-Site Scripting
Stars SMTP Mailer <= 1.7 - Reflected Cross-Site Scripting
StatPressCN <= 1.9.1 - Reflected Cross-Site Scripting
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting
Apply with LinkedIn buttons <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CBX Accounting & Bookkeeping <= 1.3.14 - Reflected Cross-Site Scripting
Find Content IDs <= 1.0 - Reflected Cross-Site Scripting
Powie's pLinks PagePeeker <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
radSLIDE <= 2.1 - Missing Authorization
Category Custom Fields <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Loops <= 1.0.2 - Reflected Cross-Site Scripting
Magic Google Maps <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Login Attempt Log <= 1.3 - Reflected Cross-Site Scripting
Jet Skinner for BuddyPress <= 1.2.5 - Reflected Cross-Site Scripting
Network-Favorites <= 1.1 - Reflected Cross-Site Scripting
Contact Form 7 – Paystack Add-on <= 1.2.3 - Reflected Cross-Site Scripting
LJ Custom Menu Links <= 2.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.