Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
JetElements For Elementor <= 2.7.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Broken Links Remover <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) SQL Injection
bbPress2 shortcode whitelist <= 2.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPAMS <= 44.0 (17-08-2023) - Unauthenticated Stored Cross-Site Scripting
mLanguage <= 1.6.1 - Cross-Site Request Forgery
Anthologize <= 0.8.3 - Cross-Site Request Forgery
Modal Survey <= 2.0.2.0.1 - Reflected Cross-Site Scripting
Simple Sitemap – Create a Responsive HTML Sitemap <= 3.6.0 - Missing Authorization
Super Store Finder <= 7.2 - Unauthenticated SQL Injection
BERTHA AI <= 1.12.10.2 - Authenticated (Subscriber+) Arbitrary Content Deletion
JetWooBuilder <= 2.1.18 - Missing Authorization
Style Manager < 2.3.0 - Cross-Site Request Forgery to Settings Update
Payment Form for PayPal Pro <= 1.1.72 - Authenticated (Administrator+) Stored Cross-Site Scripting
Social Media Links <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
IP2Location Variables <= 2.9.5 - Cross-Site Request Forgery
Target Video Easy Publish <= 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Vitepos <= 3.1.7 - Missing Authorization
Docket Cache <= 24.07.02 - Unauthenticated Local File Inclusion
WP Post to PDF Enhanced <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Maps <= 0.98 - Cross-Site Request Forgery
WPCafe <= 2.2.32 - Authenticated (Contributor+) Local File Inclusion
Advanced Dynamic Pricing for WooCommerce <= 4.9.3 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.