Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersAffiliates Manager <= 2.7.7 - Cross-Site Scripting
10WebSocial <= 1.1.26 - Authenticated (Admin+) SQL Injection
WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Love Travel 2.0 - 3.7 - Reflected Cross-Site Scripting
Love Travel 1.0 - 1.9 - Reflected Cross-Site Scripting and Cross-Frame Scripting
Custom Dashboard & Login Page – AGCA <= 6.5.4 - Reflected Cross-Site Scripting
LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting
Elementor Addon Elements <= 1.6.3 - Reflected Cross-Site Scripting
Cookiebot | GDPR/CCPA Compliant Cookie Consent and Control <= 3.6.0 - Reflected Cross-Site Scripting
Sticky Menu & Sticky Header <= 2.20 - Reflected Cross-Site Scripting
All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery
EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass
Constant Contact Forms <= 1.8.7 Editor+ Stored Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization
Augmented reality plugin <= 1.2.0 - Arbitrary File Upload
File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution
Ceceppa Multilingua <= 1.5.17 - Reflected Cross-Site Scripting
Subscribe Sidebar plugin by Blubrry <= 1.3.1 - Reflected Cross-Site Scripting
Chamber Dashboard Business Directory < 3.3.1 - Cross-Site Scripting
Recall Products <= 0.8 - Authenticated SQL Injection
WP smart CRM & Invoices FREE <= 1.8.7 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.