Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP Prayer II <= 2.4.7 - Cross-Site Request Forgery to Email Settings Update
AZAN Plugin <= 0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Booking <= 2.4.4 - Authenticated Stored Cross-Site Scripting
Amen <= 3.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Social Pixel <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
SVGator – Add Animated SVG Easily <= 1.2.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
The Events Calendar Free & Pro <= 6.4.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Events Access
Pray For Me <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Similarity <= 3.0 - Cross-Site Request Forgery to Plugin Reset
WordPress Jitsi Shortcode <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Inquiry Cart <= 3.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Alemha Watermarker <= 1.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
WP Prayer II <= 2.4.7 - Cross-Site Request Forgery to Settings Update
Similarity <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WordPress Jitsi Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution
LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor <= 1.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Schema App Structured Data <= 2.2.0 - Missing Authorization
Event post <= 5.9.4 - Missing Authorization
Custom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site Scripting
Email Log <= 2.4.8 - Unauthenticated Hook Injection
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.