Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Missing Authorization
weForms <= 1.6.20 - Missing Authorization
Booking Package <= 1.6.27 - Unauthenticated Price Manipulation
collectchat <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
Essential Blocks for Gutenberg <= 4.4.9 - Missing Authorization
Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Revisions Delete <= 1.5.3 - Cross-Site Request Forgery
WordPress Page Builder – Zion Builder <= 3.6.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Hotel Booking <= 2.0.9.2 - Missing Authorization
Lordicon Animated Icons <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 4.1.7 - Cross-Site Request Forgery
Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization
Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting
Booking Activities <= 1.15.19 - Reflected Cross-Site Scripting
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export
News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update
Fluent CRM <= 2.8.44 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.