Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
WP Cookie Consent <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Google Photos Grid <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Plugin Central <= 2.5.1 - Cross-Site Request Forgery to Arbitrary File Deletion
BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
WP Filter Post Category <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Loan Calculator <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPVN <= 0.7.8 - Cross-Site Request Forgery
Able Player <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Navegg Analytics <= 3.3.3 - Cross-Site Request Forgery
Custom Functions Plugin <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Hacklog Remote Attachment <= 1.3.2 - Cross-Site Request Forgery
Blog Manager WP <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Image Hover Effects For WPBakery Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP AVCL Automation Helper (formerly WPFlyLeads) <= 3.4 - Authenticated (Subscriber+) Server-Side Request Forgery
Print Science Designer <= 1.3.155 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Xpert Tab <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Counter <= 2.0.5 - Authenticated (Administrator+) PHP Object Injection
SCSS-Library <= 0.4.1 - Cross-Site Request Forgery
Google News <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Zalo Official Live Chat <= 1.0.0 - Cross-Site Request Forgery
Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulation
Multi-Column Taxonomy List <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Library Downloader <= 1.3.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.