Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP Pocket URLs <= 1.0.2 - Reflected Cross-Site Scripting
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
BestWebSoft's Like & Share <= 2.73 - Unauthenticated Password Protected Post Disclosure
HDW Player Plugin (Video Player & Video Gallery) <= 5.0 - Cross-Site Scripting
BrainCert – HTML5 Virtual Classroom <= 2.1 - Reflected Cross-Site Scripting
Track Geolocation Of Users Using Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
List all posts by Authors, nested Categories and Title <= 2.8.2 - Cross-Site Scripting
Event post <= 5.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Ads by datafeedr.com <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Download Manager <= 3.2.82 - Unauthenticated Password Leak
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Database for CF7 <= 1.2.4 - Missing Authorization via wpcf7db_delete AJAX action
Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name
Adifier (Premium Theme) < 3.1.4 - Reflected Cross-Site Scripting
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection
NextScripts <= 4.4.2 - Reflected Cross-Site Scripting via code
GDPR Cookie Consent by Supsystic <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
KP Fastest Tawk.to Chat <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Razorpay for WooCommerce <= 4.5.6 - Missing Authorization
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.