Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMedia Hygiene <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Happy SCSS Compiler - Compile SCSS to CSS automatically <= 1.3.10 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Squelch Tabs and Accordions Shortcodes <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
WP Affiliate Platform <= 6.5.1 - Cross-Site Request Forgery to Afilliate Deletion
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting
Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions
Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload
Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update
Counterpoint <= 1.8.1 - Reflected Cross-Site Scripting
Inline Related Posts <= 3.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Default Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File Upload
Jetpack Boost <= 3.4.6 - Authenticated (Admin+) Server-Side Request Forgery
Floating Social Media Links <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
UltraAddons Elementor Lite <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Notification Bar <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Social Share <= 3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Get Better Reviews for WooCommerce <= 4.0.6 - Missing Authorization
Elementor Addons, Widgets and Enhancements – Stax <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Media & Share Icons <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Link To Bible <= 2.5.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ultimate Auction <= 4.2.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.