Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
Mail Baby SMTP <= 2.8 - Cross-Site Request Forgery
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Category Featured Images <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
CF7 Submissions <= 0.26 - Missing Authorization
WPCasa <= 1.4.1 - Unauthenticated Code Injection
Subresource Integrity (SRI) Manager <= 0.4.0 - Missing Authorization
Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery
GD bbPress Tools <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Goracash <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Frontend Admin <= 1.22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure
Kama Click Counter <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure
Sweet Energy Efficiency <= 1.0.8 - Cross-Site Request Forgery
Clariti <= 1.2.1 - Missing Authorization
Quiz Maker <= 6.7.0.64 - Cross-Site Request Forgery
WPLMS <= 4.970 - Missing Authorization
WP Delete User Accounts <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Elementor Addons <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection
NIX Anti-Spam Light <= 0.0.4 - Cross-Site Request Forgery
Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.