Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHDW Player Plugin (Video Player & Video Gallery) <= 5.0 - Cross-Site Scripting
BrainCert – HTML5 Virtual Classroom <= 2.1 - Reflected Cross-Site Scripting
Track Geolocation Of Users Using Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
List all posts by Authors, nested Categories and Title <= 2.8.2 - Cross-Site Scripting
Event post <= 5.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Ads by datafeedr.com <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Download Manager <= 3.2.82 - Unauthenticated Password Leak
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Database for CF7 <= 1.2.4 - Missing Authorization via wpcf7db_delete AJAX action
Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection
NextScripts <= 4.4.2 - Reflected Cross-Site Scripting via code
GDPR Cookie Consent by Supsystic <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
KP Fastest Tawk.to Chat <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Razorpay for WooCommerce <= 4.5.6 - Missing Authorization
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
JetFormBuilder <= 3.1.4 - Unauthenticated Content Injection
CommentLuv <= 3.0.4 - Server Side Request Forgery via do_click
Aparat <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Razorpay for WooCommerce <= 4.5.6 - Cross-Site Request Forgery
Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates <= 3.0.5 - Cross-Site Request Forgery via process_bulk_action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.