Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersChained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Monolit <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Ajax Search Lite <= 4.10.3 - Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Gutenberg Forms <= 2.2.8.3 - Authenticated(Subscriber+) Sensitive Information Disclosure
WordPress Comments Import & Export <= 2.3.1 - CSV Injection
Vulnerability: eCommerce Product Catalog plugin for WordPress <= 3.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
A2 Optimized WP <= 3.0.4 - Cross Site Request Forgery
0mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
Booking Calendar Contact Form <= 1.2.34 - Cross-Site Request Forgery via cpdexbccf_feedback
Arigato Autoresponder and Newsletter <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting
Auto YouTube Importer <= 1.0.3 - Cross-Site Request Forgery
Similar Posts – Best Related Posts Plugin for WordPress <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 3.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting
VK All in One Expansion Unit <= 9.85.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Watu Quiz <= 3.3.8 - Authenticated (Admin+) Stored Cross-Site Scripting
GS Insever Portfolio <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
User Activity <= 1.0.1 - IP Address Spoofing
WebinarIgnition <= 2.14.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Gallery – Image and Video Gallery with Thumbnails <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Commenter Emails <= 2.6.1 - Unauthenticated CSV Injection
CC Custom Taxonomy <= 1.0.1 - Authenticated (Administrator+) Cross Site Scripting
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.