Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWP Edit Menu <= 1.5.0 - Cross-Site Request Forgery
SEO Redirection Plugin – 301 Redirect Manager <= 8.9 - Cross-Site Request Forgery
Ninja Job Board <= 1.3.2 - Information Disclosure
Download buttons for Youtube videos <= 1.03 - Reflected Cross-Site Scripting
Yotpo Reviews for WooCommerce (Unofficial) <= 2.0.4 - Cross-Site Request Forgery to Plugin Settings Update
Ask Me <= 6.8.3 - Cross-Site Request Forgery
Highlight Searched Terms in Results <= 1.03 - Reflected Cross-Site Scripting
Social Slider Feed <= 2.0.4 - Authenticated (Scubscriber+) Stored Cross-Site Scripting
Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
Images Asynchronous Load <= 1.05 - Reflected Cross-Site Scripting
API info for Plugins & Themes from WP.ORG <= 1.04 - Reflected Cross-Site Scripting
Profile & Dashboard fields <= 1.03 - Reflected Cross-Site Scripting
Social Slider Feed <= 2.0.4 - Missing Authorization to Cross-Site Scripting
Social Slider Feed <= 2.0.4 - Reflected Cross-Site Scripting
MailerLite – Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery
Debug Bar <= 1.85 - Reflected Cross-Site Scripting
Add Hierarchy (parent) to post <= 3.12 - Reflected Cross-Site Scripting
WP phpMyAdmin <= 5.2.0.3 - Reflected Cross-Site Scripting
Fast Flow <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Floating Div <= 3.0 - Authenticated Stored Cross-Site Scripting
ЮKassa для WooCommerce <= 2.3.0 - Missing Authorization
ЮKassa для WooCommerce <= 2.3.0 - Cross-Site Request Forgery to Settings Update
Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.