Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Custom Block Builder – Lazy Blocks <= 3.8.2 - Reflected Cross-Site Scripting
Cross-Site Request Forgery <= 1.2.4 - Cross-Site Request Forgery
Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload
Simple catalogue <= 1.0.2 - Reflected Cross-Site Scripting
WP Extra Fields <= 1.0.1 - Reflected Cross-Site Scripting
R3W InstaFeed <= 1.0 - Reflected Cross-Site Scripting
Simple Certain Time to Show Content <= 1.2.2 - Reflected Cross-Site Scripting
Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting
WordPress Activity-o-meter <= 1 - Reflected Cross-Site Scripting
pushBIZ – Push Notification <= 1.0 - Reflected Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Post Sync <= 1.1 - Reflected Cross-Site Scripting
NewsTicker <= 1.0 - Reflected Cross-Site Scripting
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
WPMovieLibrary <= 2.1.4.8 - Reflected Cross-Site Scripting
WP Pricing Table <= 1.1 - Reflected Cross-Site Scripting
CalendApp <= 1.1 - Reflected Cross-Site Scripting
Om Stripe <= 02.00.00 - Reflected Cross-Site Scripting
ZX Allows Environment Variable Injection for dotenv API
ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion
WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.