Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Include Mastodon Feed <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Optimate Ads <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read More Copy Link <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Show notice or message on admin area <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP doodlez <= 1.0.10 - Unauthenticated Stored Cross-Site Scripting
WP Spell Check <= 9.21 - Cross-Site Request Forgery
Print PDF Generator and Publisher <= 1.2.0 - Cross-Site Request Forgery
Image Rotator <= 2.0 - Reflected Cross-Site Scripting
Links in Captions <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Select All Text Box <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Theme Options Z <= 1.4 - Cross-Site Request Forgery
uListing <= 2.1.6 - Authenticated (Contributor+) SQL Injection
Total Contest Lite <= 2.8.1 - Reflected Cross-Site Scripting
Slide Banners <= 1.3 - Missing Authorization
Easy WP Tiles <= 1 - Authenticated (Administrator+) Stored Cross-Site Scripting
NextGen Cooliris Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. <= 1.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
FlexIDX Home Search <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Countdown FX <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Table For WooCommerce <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
OneStore Sites <= 0.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation
RapidLoad <= 2.4.4 - Missing Authorization
Listings for Appfolio <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.