Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWP Finance <= 1.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
OPSI Israel Domestic Shipments <= 2.6.5 - Reflected Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
Zalomení <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected Cross-Site Scripting
WP Email Newsletter <= 1.1 - Reflected Cross-Site Scripting
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting
WP MediaTagger <= 4.1.1 - Reflected Cross-Site Scripting
WP DeskLite – Helpdesk and Support Plugin <= 1.0.0 - Reflected Cross-Site Scripting
XML for Avito <= 2.5.2 - Reflected Cross-Site Scripting
Tabulate <= 2.10.3 - Reflected Cross-Site Scripting
CanvasFlow <= 1.5.5 - Reflected Cross-Site Scripting
Policy Genius <= 2.0.4 - Reflected Cross-Site Scripting
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Responsive iframe <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
A5 Custom Login Page <= 2.8.1 - Reflected Cross-Site Scripting
Widget4Call <= 1.0.7 - Reflected Cross-Site Scripting
WP Finance <= 1.3.6 - Reflected Cross-Site Scripting
ECT Home Page Products <= 1.9 - Reflected Cross-Site Scripting
User Messages <= 1.2.4 - Reflected Cross-Site Scripting
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting
WP MediaTagger <= 4.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.