Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
WP Backup+ (Unknown Versions) - Sensitive Information Disclosure
Diplomat Theme <= 1.0.1 - Sensitive Information Disclosure
VideoJS (Various Versions) - Cross-Site Scripting
FeedWordPress < 2015.0514 - Reflected Cross-Site Scripting
Contact Form Email <= 1.3.11 - Cross-Site Request Forgery to Cross-Site Scripting
Syndication Links < 1.0.3 - DOM-based Cross-Site Scripting
Post Kinds < 1.3.1.1 - Cross-Site Scripting
Modern <= 1.4.1 - Cross-Site Scripting
Inline Google Spreadsheet Viewer <= 0.9.6 - Cross-Site Request Forgery
Adsense Click Fraud Monitoring <= 1.8.6 - Reflected Cross-Site Scripting
WP Fast Cache <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Cross-Site Scripting
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Command Execution
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Code Execution
Roomcloud < 1.3 - Cross-Site Scripting
WordPress File Upload < 2.7.1 - Arbitrary File Upload
Ad Buttons <= 2.3.1 - Cross-Site Request Forgery to Cross-Site Scripting
Amazon Product in a Post Plugin < 3.5.3 - SQL Injection
YARPP – Yet Another Related Posts Plugin < 4.2.5 - Cross-Site Request Forgery
Ultimate Profile Builder < 3.0 - Cross-Site Request Forgery to Cross-Site Scripting
WordPress Core < 4.2.2 - Cross-Site Scripting via Comments
Embed Articles <= 7.0.3 - Reflected Cross-Site Scripting
ClickBank Affiliate Ads < 1.31 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.