Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Timed Content <= 2.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Watu Quiz <= 3.3.8.1 - Reflected Cross-Site Scripting
Youzify <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Font Awesome <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Excessive Attack Surface in pyload-ng
WP Yelp Review Slider <= 7.0 - Authenticated (Subscriber+) SQL Injection
WP Terms Popup <= 2.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Parsi Date <= 4.0.1 - Reflected Cross-Site Scripting
Name Directory <= 1.27.1 - Cross Site Request Forgery
Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Captcha Bypass
Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Email Spoofing
Customer Reviews for WooCommerce <= 5.15.0 - Authenticated (Subscriber+) Local File Inclusion
Modal Dialog <= 3.5.9 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Popups <= 2.1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Extensive VC Addons for WPBakery page builder <= 1.9 - Unauthenticated Local File Inclusion
Ultimate Addons for Beaver Builder – Lite <= 1.5.4 - Missing Authorization
Mercado Pago payments for WooCommerce <= 6.6.0 - Cross-Site Request Forgery
Paid Memberships Pro <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Subscriber+) SQL Injection
Social Like Box and Page by WpDevArt <= 0.8.40 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Stripe Payments For WooCommerce by Checkout Plugins <= 1.4.10 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.