Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Image Captcha <= 1.2 - Cross-Site Request Forgery
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Easy Page Transition <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Lightview Plus <= 3.1.3 - Reflected Cross-Site Scripting
DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure
WP Social Widget <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Map Contact <= 3.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Generate Post Thumbnails <= 0.8 - Cross-Site Request Forgery
My Bootstrap Menu <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Flickr set slideshows <= 0.9 - Authenticated (Contributor+) SQL Injection
Hester <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Include URL <= 0.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Driving Directions <= 1.4.4 - Reflected Cross-Site Scripting
Visual Text Editor <= 1.2.1 - Authenticated (Contributor+) Remote Code Execution
Simple Optimizer <= 1.2.7 - Cross-Site Request Forgery
Web Directory Free <= 1.7.6 - Unauthenticated SQL Injection
RainbowNews <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Cackle <= 4.33 - Cross-Site Request Forgery
AI Preloader <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
IG Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Colorful Tag Cloud <= 2.0.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.