Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
WP Odoo Form Integrator <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Whitish Lite <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
NextGEN Gallery Voting <= 2.7.6 - Reflected Cross-Site Scripting
AvaiBook <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Clink <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
ARPrice <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Flipdish Ordering System <= 1.5.2 - Cross-Site Request Forgery to Settings Update
Login Redirect <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
My Default Post Content <= 0.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Rating <= 1.4 - Cross-Site Request Forgery
Rewrite <= 0.2.1 - Cross-Site Request Forgery
Key4ce osTicket Bridge <= 1.4.0 - Reflected Cross-Site Scripting
Top Bar <= 3.3 - Missing Authorization
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Custom Script Integration <= 2.1 - Cross-Site Request Forgery
Omnify <= 2.0.3 - Reflected Cross-Site Scripting
DICOM Support <= 0.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Weather Layer <= 4.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
OSS Upload <= 4.8.9 - Cross-Site Request Forgery
Secret Meta <= 1.2.1 - Reflected Cross-Site Scripting
MorningTime Lite <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.