Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Hypotext <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Plugin Info Card <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Enable Media Replace <= 4.1.5 - Reflected Cross-Site Scripting
JSON Structuring Markup <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Uptime Robot Plugin for WordPress <= 2.3 - Cross-Site Request Forgery
SheetDB <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced Speed Increaser <= 2.2.1 - Cross-Site Request Forgery
SCSS WP Editor <= 1.2.1 - Cross-Site Request Forgery
Planyo online reservation system <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementsCSS Addons for Elementor <= 1.0.8.7 - Unauthenticated Server-Side Request Forgery
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
BookingPress <= 1.1.28 - Authenticated (Administrator+) SQL Injection
Simple Map No Api <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Query Wrangler <= 1.5.54 - Cross-Site Request Forgery
PhotoShelter for Photographers Blog Feed Plugin <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
News, Magazine and Blog Elements <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Job Board Manager <= 2.1.60 - Missing Authorization
Ebook Downloader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Publitio <= 2.1.8 - Missing Authorization
Clockinator Lite <= 1.0.7 - Missing Authorization
Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Reflected Cross-Site Scripting
xili-language <= 2.21.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.