Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
RSS News Scroller <= 2.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP krpano <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Charity-thermometer <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSVPMaker Volunteer Roles <= 1.5.1 - Reflected Cross-Site Scripting
Easy School Registration <= 3.9.8 - Reflected Cross-Site Scripting
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting
Custom CSS Addons <= 1.9.1 - Reflected Cross-Site Scripting
HSS Embed Streaming Video <= 3.23 - Reflected Cross-Site Scripting
Email to Download <= 3.1.0 - Reflected Cross-Site Scripting
FooGallery Captions <= 1.0.2 - Reflected Cross-Site Scripting
add custom google tag manager <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Style Admin <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Stop Comment Spam <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Woo Update Variations In Cart <= 0.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
XLSXviewer <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
HyperComments <= 0.9.6 - Reflected Cross-Site Scripting
Ps Ads Pro <= 1.0.0 - Reflected Cross-Site Scripting
Lockets <= 0.999 - Reflected Cross-Site Scripting
Visit Site Link enhanced <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
visualslider Sldier <= 1.1.1 - Reflected Cross-Site Scripting
Ultimate Events <= 1.3.3 - Reflected Cross-Site Scripting
WordPress Dashboard Tweeter <= 1.3.2 - Missing Authorization
PAPERCITE <= 0.5.18 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.