Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Image&Video FullScreen Background <= 1.6.7 - Authenticated (Contributor+) SQL Injection
LBG Zoominoutslider <= 5.4.4 - Authenticated (Contributor+) SQL Injection
Greenify <= 2.2 - Unauthenticated Local File Inclusion
Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion
Referral Link Tracker <= 1.1.4 - Missing Authorization
User Avatar - Reloaded <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Geo <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
algoliasearch-helper is vulnerable to Prototype Pollution in _merge()
BuddyPress <= 14.3.4 - Missing Authorization
Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
WP Popup Builder <= 1.3.8 - Unauthenticated Information Exposure
Popular Posts by Webline <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Links shortcode <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Microdata <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Image shrinker <= 1.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
PiranhaCMS stored XSS
Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending
cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery
Sync Feedly <= 1.0.1 - Cross-Site Request Forgery to Sync Trigger
Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery
VM Menu Reorder plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.