Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
JW-Player-Plugin-For-Wordpress <= 2.1.14 - Reflected Cross-Site Scripting
My Page Order <= 4.3 - Cross-Site Request Forgery to Cross-Site Scripting
Watu Quiz <= 2.6.7 - Authenticated (Admin+) SQL Injection
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.5.58 - Arbitrary File Upload
WooCommerce < 2.4.9 - Cross-site Scripting
WP Fastest Cache < 0.8.4.9 - SQL Injection
Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting
BuddyPress <= 2.3.4 - Privilege Escalation
Tag Miner (Automatic Tag Extraction) < 1.1.5 - Cross-Site Scripting
Tag Miner (Automatic Tag Extraction) < 1.1.5 - Cross-Site Request Forgery
Toolset Types < 1.8.8 - Cross-Site Scripting
JNews - SQL Injection
cckseblod
Neuvoo Jobroll <= 2.0 - Reflected Cross-Site Scripting
Neuvoo Jobroll <= 2.0 - Reflected Cross-Site Scripting
Gwolle Guestbook <= 1.5.3 - Remote File Inclusion
WordPress Calls to Action < 2.5.1 - Cross-Site Scripting
WordPress File Upload <= 3.4.0 - Arbitrary File Upload
Crony Cronjob Manager < 0.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Visitors Online by BestWebSoft <= 0.3 - SQL Injection
Realtyna RPL - Other
wp-championship < 5.9 - SQL Injection
Recent Posts Widget Extended <= 0.9.9.3 - Cross Site-Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.