Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersBooking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
SpaBiz <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Z Companion <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
SMTP for Amazon SES – YaySMTP <= 1.8 - Unauthenticated Stored Cross-Site Scripting via Email Logs
Affiliate Link Tracker <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Arconix FAQ <= 1.9.5 - Reflected Cross-Site Scripting
Terminal Africa <= 1.13.17 - Reflected Cross-Site Scripting
Affiliate Links Lite <= 3.1.0 - Reflected Cross-Site Scripting
Industrial Lite <= 1.0.8 - Missing Authorization
Activity Reactions For Buddypress <= 1.0.22 - Reflected Cross-Site Scripting
iONE360 configurator <= 2.0.57 - Reflected Cross-Site Scripting
WP-Hijri <= 1.5.3 - Reflected Cross-Site Scripting
Rankology SEO – On-site SEO <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
MSRP (RRP) Pricing for WooCommerce <= 1.8.1 - Reflected Cross-Site Scripting
Related Videos for JW Player <= 1.2.0 - Reflected Cross-Site Scripting
Web2application <= 6.0 - Reflected Cross-Site Scripting
Paid Videochat Turnkey Site <= 7.3.11 - Authentication Bypass
WP Maps – Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting
UXsniff <= 1.2.8 - Reflected Cross-Site Scripting
Simple WP Events <= 1.8.17 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.