Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersLeaflet Map < 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
PWA for WP & AMP < = 1.7.32 - Missing Authorization
Leaflet Map <= 2.23.3 - Contributor+ Stored Cross-Site Scripting
PWA for WP & AMP <= 1.7.32 - Arbitrary File Upload
SEO <= 4.0.2 - Cross-Site Request Forgery
intimate Payments Plugin <= 1.3.1 - Cross-Site Request Forgery
MZ MBO Access <= 2.0.8 - Cross-Site Request Forgery
KONTXT Content Advisor <= 2.2 - Cross-Site Request Forgery
Fontsampler <= 0.4.12 - Cross-Site Request Forgery to Cross-Site Scripting
Journey Analytics <= 1.0.12 - Cross-Site Request Forgery
WP Prayer <= 1.5.4 - Cross-Site Request Forgery
Strong Testimonials <= 2.51.2 - Authorization Bypass
BuddyPress Customer.io Analytics Integration <= 1.1.6 - Cross-Site Request Forgery
MZ Mindbody API <= 2.8.2 - Cross-Site Request Forgery
WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc <= 5.4.9 - Reflected Cross-Site Scripting
Instantio – WooCommerce Quick Checkout | Instant Checkout, Side Cart & Popup Cart <= 1.2.5 - Cross Site Request Forgery
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.35.1 - Authorization Bypass
KONTXT Improves WordPress Search <= 1.4.6 - Cross-Site Request Forgery
WooCommerce Custom Registration Form <= 1.0.4 - Cross-Site Request Forgery
WooCommerce Reviews Plugin with Multi-criteria Rating by ReviewX < 1.2.9 - Cross-Site Request Forgery
BNG Gateway For WooCommerce <= 1.6.10 - Cross-Site Request Forgery
Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.