Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Quick Count <= 3.00 - Unauthenticated PHP Object Injection
GeoDigs <= 3.4.1 - Reflected Cross-Site Scripting
Slides & Presentations <= 0.0.39 - Missing Authorization to Content Injection
CGD Arrange Terms <= 1.1.3 - Reflected Cross-Site Scripting
FP RSS Category Excluder <= 1.0.0 - Reflected Cross-Site Scripting
LH Login Page <= 2.14 - Reflected Cross-Site Scripting
LocalGrid <= 1.0.1 - Reflected Cross-Site Scripting
Call To Action <= 1.0.2 - Reflected Cross-Site Scripting
EmailShroud <= 2.2.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
WP OpenSearch <= 1.0 - Reflected Cross-Site Scripting
GMAPS for WPBakery Page Builder Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Attach Gallery Posts <= 1.6 - Reflected Cross-Site Scripting
Ultimate Subscribe <= 1.3 - Reflected Cross-Site Scripting
Solidres – Hotel booking plugin <= 0.9.4 - Authenticated (Contributor+) SQL Injection
Nite Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rename Author Slug <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Journal <= 1.1 - Missing Authorization
Auphonic Importer <= 1.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Page Extensions <= 0.6 - Reflected Cross-Site Scripting
WP Photo Sphere <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Tynt <= 0.2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Shortcode in Comment <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Push Envoy Notifications <= 1.0.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.