Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCustom Functions Plugin <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Hacklog Remote Attachment <= 1.3.2 - Cross-Site Request Forgery
Blog Manager WP <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Image Hover Effects For WPBakery Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP AVCL Automation Helper (formerly WPFlyLeads) <= 3.4 - Authenticated (Subscriber+) Server-Side Request Forgery
Print Science Designer <= 1.3.155 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Xpert Tab <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Counter <= 2.0.5 - Authenticated (Administrator+) PHP Object Injection
SCSS-Library <= 0.4.1 - Cross-Site Request Forgery
Google News <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Zalo Official Live Chat <= 1.0.0 - Cross-Site Request Forgery
Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulation
Multi-Column Taxonomy List <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Library Downloader <= 1.3.1 - Missing Authorization
Contact Form 7 Calendar <= 3.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Nepali Post Date <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
BeerXML Shortcode <= 0.7.1 - Authenticated (Contributor+) Server-Side Request Forgery
RRSSB <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'
Vikinger <= 1.9.30 - Authenticated (Subscriber+) Privilege Escalation via 'vikinger_user_meta_update_ajax'
Advanced lazy load <= 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WS Force Login Page <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
360 View <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.