Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Ibtana <= 1.2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Gallery ( Responsive ) <= 4.0 - Cross-Site Request Forgery to Privilege Escalation
WP Social SEO Booster – Knowledge Graph Social Signals SEO <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Display Products by Tags <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woocommerce – Loi Hamon <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Just Variables <= 1.2.3 - Cross-Site Request Forgery
Pathomation <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Maintenance & Countdown <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Minimum Password Strength <= 1.2.0 - Cross-Site Request Forgery
Contact Form 7 Star Rating <= 1.10 - Authenticated (Editor+) Stored Cross-Site Scripting
PlayerJS <= 2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bravo Search & Replace <= 1.0 - Authenticated (Administrator+) SQL Injection
Yawave <= 2.9.1 - Unauthenticated SQL Injection
Table of Contents Block <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hover Image Button <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
Booknetic <= 4.0.9 - Cross-Site Request Forgery
WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
Simple Google Sitemap <= 1.6 - Cross-Site Request Forgery
WP About Author <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Direct Checkout Button for WooCommerce <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Reactive Mortgage Calculator <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
无觅相关文章插件 <= 1.0.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.