Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
PilotPress <= 2.0.36 - Missing Authorization
Geolocation IP Detection <= 5.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Doliconnect <= 9.5.7 - Cross-Site Request Forgery
DethemeKit For Elementor <= 2.1.10 - Missing Authorization
WP Compress <= 6.50.54 - Missing Authorization
Gallery Lightbox <= 1.0.0.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPMK PDF Generator <= 1.0.1 - Cross-Site Request Forgery
Accordion FAQ <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
WP Category Dropdown <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
MaxiBlocks <= 2.1.3 - Missing Authorization
Javo Core <= 3.0.0.266 - Missing Authorization
Double the Donation <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Force Update Translations <= 0.5 - Cross-Site Request Forgery
Team <= 5.0.6 - Missing Authorization
Fastly <= 1.2.28 - Cross-Site Request Forgery
Revive.so <= 2.0.6 - Missing Authorization
Podlove Subscribe button <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slightly troublesome permalink <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Event Rocket <= 3.3 - Missing Authorization
BuddyPress Notification Widget <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Printeers Print & Ship <= 1.17.0 - Cross-Site Request Forgery
StylePress for Elementor <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Current Age Plugin <= 1.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.