Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation
Bicycleshop <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fancy Roller Scroller <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Video & Photo Gallery for Ultimate Member <= 1.1.1 - Reflected Cross-Site Scripting
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Reflected Cross-Site Scripting
WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Falcon – WordPress Optimizations & Tweaks <= 2.8.3 - Missing Authorization
SeedProd Pro <= 6.18.12 - Authenticated (Administrator+) SQL Injection
Poll Builder <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Currency Exchange Rates <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Sogrid <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Options Update
Simple Presenter <= 1.5.1 - Reflected Cross-Site Scripting
Amazon Product Price <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
I Plant A Tree <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
VForm <= 3.0.0 - Reflected Cross-Site Scripting
Video & Photo Gallery for Ultimate Member <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
J&T Express Malaysia <= 2.0.13 - Reflected Cross-Site Scripting via [placeholder]
Integrate Firebase <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Media Shortcodes <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Downloader <= 0.4.7.4 - Reflected Cross-Site Scripting
WP GeoNames <= 1.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting
Planaday API <= 11.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.