Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWordPress Core < 4.9.5 - Security Misconfiguration with URL Hostnames
WordPress File Upload <= 4.3.2 - Cross-Site Scripting via Shortcodes
Relevanssi <= 4.0.4 - Cross-Site Scripting
WP Image Zoom <= 1.23 - Cross-Site Request Forgery to Denial of Service
WP Security Audit Log <= 3.1.1 - Sensitive Information Disclosure
Events Manager <= 5.8.1.1 - Cross-Site Scripting
Site Editor <= 1.1.1 - Local File Inclusion
Duplicator <= 1.2.32 - Cross-Site Scripting
MailPoet Newsletters <= 2.8.1 - Spam Injection
Newsletters <= 4.6.8.5 - Object Injection
bbPress Move Topics <= 1.1.4 - Cross-Site Request Forgery
bbPress Move Topics <= 1.1.4 - PHP Object Injection
WP All Import <= 3.4.6 - Cross-Site Scripting
WP All Import <= 3.4.5 - Cross-Site Scripting
Activity Log <= 2.4.0 - Multiple Cross-Site Scripting
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting
WOOF - Products Filter for WooCommerce <= 1.1.9 - Remote Code Execution
WOOF - Products Filter for WooCommerce <= 1.1.9 - Local File Inclusion
iThemes Security <= 6.9.0 - Cross-Site Scripting
Social Share, Social Login and Social Comments <= 7.10.6 - Authentication Bypass
Bit File Manager <= 5.0.0 - Information Disclosure
WordPress Gallery Plugin – NextGEN Gallery <= 2.2.46 - Sensitive Information Disclosure
WP Job Manager <= 1.29.2 - PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.