Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
AI ChatBot for WordPress – WPBot <= 6.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection
JSFiddle Shortcode <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Recapture for WooCommerce <= 1.0.43 - Cross-Site Request Forgery to Settings Update
Stylish Price List <= 7.1.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Form Maker by 10Web <= 1.15.29 - Authenticated (Admin+) Stored Cross-Site Scripting
WP ERP <= 1.13.3 - Authenticated (Admin+) Stored Cross-Site Scripting
SEO Plugin by Squirrly SEO <= 12.4.07 - Missing Authorization
Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
AFI – The Easiest Integration Plugin <= 1.99.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Smart Maintenance Mode <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.1.23 - Authenticated (Admin+) Stored Cross-Site Scripting
CYAN Backup <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
PublishPress Authors <= 4.7.3 - Authenticated (Administrator+) SQL Injection
CYAN Backup <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Tabs <= 2.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Prisna GWT – Google Website Translator <= 1.4.13 - Authenticated (Admin+) Stored Cross-Site Scripting
Slider by 10Web <= 1.2.61 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mobile Contact Bar <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.