Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersOcean Extra <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection
Correos Oficial <= 1.3.0.0 - Unauthenticated Arbitrary File Download
Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting
Namaste! LMS <= 2.5.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
GS Products Slider for WooCommerce <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Portfolio for Envato <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Filterable Portfolio <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AI Contact Us Form <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
PrivateContent <= 8.4.3 - Protection Mechanism Bypass
Easy Digital Downloads <= 3.1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Robo Gallery Plugin <= 3.2.11 - Cross-Site Request Forgery
EmbedStories <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
BackupBuddy <= 8.8.2 - Reflected Cross-Site Scripting
WP Email Capture <= 3.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
GS Books Showcase <= 1.3.0 - Authenticator (Contributor+) Stored Cross-Site Scripting via Shortcode
RankMath SEO <= 1.0.107.2 - Authenticated (Contributor+) Local File Inclusion
Interactive Geo Maps <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Private Message < 1.0.6 - Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.