Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
MapSVG Lite <= 8.6.4 - Missing Authorization
Automatic Ban IP <= 1.0.7 - Reflected Cross-Site Scripting
AF Tell a Friend <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Food ordering and Restaurant Menu <= 1.1 - Unauthenticated Local File Inclusion
Squeeze <= 1.6 - Authenticated (Admin+) Arbitrary File Upload
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Click & Pledge Connect Plugin <= 2.24080000-WP6.6.1 - Unauthenticated SQL Injection
REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
KeyCAPTCHA <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) SQL Injection
BP Social Connect <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
RentSyst <= 2.0.92 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPJobBoard < 5.11.1 - Cross-Site Request Forgery
Brizy Pro <= 2.8.0 - Cross-Site Request Forgery
Job Board Manager <= 2.1.60 - Authenticated (Contributor+) PHP Object Injection
WP Table Builder <= 2.0.5 - Reflected Cross-Site Scripting
WP Calais Auto Tagger <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Canonical Attachments <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Customize Login Page <= 1.1 - Cross-Site Request Forgery
Codescar Radio Widget <= 0.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Ultimate WP Mail <= 1.3.9 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.