Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Web Push <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DN Sitemap Control <= 1.0.6 - Reflected Cross-Site Scripting
VSTEMPLATE Creator <= 2.0.2 - Reflected Cross-Site Scripting
Debug Tool <= 2.2 - Missing Authorization
Scroll Top – WordPress Scroll to Top <= 1.3.3 - Reflected Cross-Site Scripting
CRUDLab Like Box <= 2.0.9 - Reflected Cross-Site Scripting
Genki Announcement <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Cloud <= 1.4.3 - Unauthenticated Arbitrary File Read
Universal Analytics Injector <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Calendi <= 1.1.1 - Reflected Cross-Site Scripting
Ui Slider Filter By Price <= 1.1 - Reflected Cross-Site Scripting
WP-Revive Adserver <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sale with Razorpay <= 1.0 - Reflected Cross-Site Scripting
SexBundle <= 1.4 - Reflected Cross-Site Scripting
AdsMiddle <= 1.0 - Reflected Cross-Site Scripting
Pastebin <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Legal + <= 1.0 - Reflected Cross-Site Scripting
Mancx AskMe Widget <= 0.3 - Reflected Cross-Site Scripting
WC Wallet <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Find Your Reps <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Comment-Emailer <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Widget Classes <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Vampire Character Manager <= 2.13 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.