Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Freesoul Deactivate Plugins <= 2.1.3 - Cross-Site Request Forgery via eos_dp_pro_delete_transient
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
Webmaster Tools <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Themify Ultra <= 7.3.5 - Privilege Escalation
MpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting
Spider Facebook <= 1.0.15 - Reflected Cross-Site Scripting
Themify Ultra <= 7.3.5 - Missing Authorization
Skype Legacy Buttons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery
WOLF <= 1.0.7.1 - Cross-Site Request Forgery
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Cross-Site Request Forgery
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Category SEO Meta Tags <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Themify Ultra <= 7.3.5 - Missing Authorization
Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title
Smooth Scroll Links <= 1.1.0 - Cross-Site Request Forgery
Webmaster Tools <= 2.0 - Cross-Site Request Forgery vin lionscripts_plg_f
Userback <= 1.0.13 - Cross-Site Request Forgery
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection
Product Category Tree <= 2.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.