Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersBauernregeln <= 1.0.1 - Reflected Cross-Site Scripting
Essay Wizard (wpCRES) <= 1.0.6.4 - Reflected Cross-Site Scripting
Email on Publish <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DF Draggable <= 1.13.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Contexto <= 1.0 - Reflected Cross-Site Scripting
WP-NOTCAPTCHA <= 1.3.1 - Reflected Cross-Site Scripting
WP-Player <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Send to a Friend Addon <= 1.4.1 - Reflected Cross-Site Scripting
Chatter <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Coronavirus (COVID-19) Outbreak Data Widgets <= 1.1.1 - Reflected Cross-Site Scripting
WOOEXIM – WooCommerce Export Import Plugin <= 5.0.0 - Unauthenticated PHP Object Injection
Site Launcher <= 0.9.4 - Reflected Cross-Site Scripting
Mindmeister Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Custom Coming Soon <= 2.2 - Reflected Cross-Site Scripting
Bible Embed <= 0.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
melascrivi-plugin <= 1.4 - Reflected Cross-Site Scripting
Browser-Update-Notify <= 0.2.1 - Reflected Cross-Site Scripting
Twitter News Feed <= 1.1.1 - Reflected Cross-Site Scripting
Quick Count <= 3.00 - Unauthenticated PHP Object Injection
GeoDigs <= 3.4.1 - Reflected Cross-Site Scripting
Slides & Presentations <= 0.0.39 - Missing Authorization to Content Injection
CGD Arrange Terms <= 1.1.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.