Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Simple Vertical Timeline <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-BlackCheck <= 2.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Authenticated (Administrator+) SQL Injection
Random Posts, Mp3 Player + ShareButton <= 1.4.1 - Reflected Cross-Site Scripting
Goodlayers Blocks <= 1.0.1 - Reflected Cross-Site Scripting
Error Notification <= 0.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Automatic Newsletter Lite <= 3.2.0 - Reflected Cross-Site Scripting
Call me Now <= 1.0.5 - Cross-Site Request Forgery
dForms <= 1.0 - Reflected Cross-Site Scripting
Marquee Style RSS News Ticker <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read
Word Freshener <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Admin Options Pages <= 0.9.7 - Reflected Cross-Site Scripting
Winning Portfolio <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bookalet <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Announcements <= 1.8 - Reflected Cross-Site Scripting
WordPress Logging Service <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Simple Custom post type custom field <= 1.0.3 - Reflected Cross-Site Scripting
Board Election <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Recip.ly Plugin <= 1.1.8 - Reflected Cross-Site Scripting
Mass Messaging in BuddyPress <= 2.2.1 - Reflected Cross-Site Scripting
Google Transliteration <= 1.7.2 - Reflected Cross-Site Scripting
Gigaom Sphinx <= 0.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.