Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Peadig’s Google +1 Button <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Drop Caps <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposure
Wp Custom CMS Block <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Cookie Consent <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Google Photos Grid <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Plugin Central <= 2.5.1 - Cross-Site Request Forgery to Arbitrary File Deletion
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
WP Filter Post Category <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Loan Calculator <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPVN <= 0.7.8 - Cross-Site Request Forgery
Able Player <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Navegg Analytics <= 3.3.3 - Cross-Site Request Forgery
Custom Functions Plugin <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Hacklog Remote Attachment <= 1.3.2 - Cross-Site Request Forgery
Blog Manager WP <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Image Hover Effects For WPBakery Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP AVCL Automation Helper (formerly WPFlyLeads) <= 3.4 - Authenticated (Subscriber+) Server-Side Request Forgery
Print Science Designer <= 1.3.155 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Xpert Tab <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Counter <= 2.0.5 - Authenticated (Administrator+) PHP Object Injection
SCSS-Library <= 0.4.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.