Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersDokan <= 3.0.8 - Cross-Site Request Forgery Bypass
Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery Bypass
Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery
Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypass
WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass
NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass
Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass
Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass
MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypass
Radio Buttons for Taxonomies <= 2.0.5 - Cross-Site Request Forgery Bypass
Feed Them Social – Page, Post, Video, and Photo Galleries <= 2.8.6 - Cross-Site Request Forgery Bypass
Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass
Import / Export Customizer Settings <= 1.0.3 - Cross-Site Request Forgery Bypass
DiveBook <= 1.1.4 - Reflected Cross-Site Scripting
DiveBook <= 1.1.4 - SQL Injection
Affiliates Manager <= 2.7.7 - Cross-Site Scripting
10WebSocial <= 1.1.26 - Authenticated (Admin+) SQL Injection
Noo JobMonster <= 4.6.6 - Sensitive Information Disclosure via Directory Listing
WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Love Travel 2.0 - 3.7 - Reflected Cross-Site Scripting
Love Travel 1.0 - 1.9 - Reflected Cross-Site Scripting and Cross-Frame Scripting
Custom Dashboard & Login Page – AGCA <= 6.5.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.