Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check
Comment Reply Email <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MStore API <= 4.0.6 - Authenticated (Subscriber+) SQL Injection
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
WP Power Stats <= 2.2.3 - Cross-Site Request Forgery
Video Gallery – YouTube Gallery <= 2.1.4 - Authenticated (Administrator+) SQL Injection
WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization
Short URL <= 1.6.8 - Cross-Site Request Forgery
Order auto complete for WooCommerce <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Seriously Simple Stats <= 1.5.1 - Reflected Cross-Site Scripting
Image vertical reel scroll slideshow <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
ShortCodes UI <= 1.9.8 - Cross-Site Request Forgery
WP User Frontend <= 3.6.8 - Missing Authorization via AJAX actions
LeadSquared Suite <= 0.7.4 - Cross-Site Request Forgery
User Location and IP <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mendeley <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Custom Widget area <= 1.2.5 - Missing Authorization
WP Ultimate Exporter <= 2.4.1 - Unauthenticated Information Disclosure
Captcha/Honeypot for Contact Form 7 <= 1.11.3 - Captcha Bypass
Interactive World Map <= 3.2.0 - Cross-Site Request Forgery
WP Bing Map Pro <= 4.1.4 - Cross-Site Request Forgery via AJAX actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.