Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersFontMeister <= 1.08 - Reflected Cross-Site Scripting
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection
Casso – Tự động xác nhận thanh toán chuyển khoản ngân hàng <= 2.8.6 - Authenticated (Admin+) Cross-Site Scripting
WP ALL Export Pro <= 1.7.8 - Authenticated SQL Injection
WP ALL Export Pro <= 1.7.8 - Authenticated Remote Code Execution
Bricks 1.0 - 1.5.3 - Missing Authorization to Arbitrary Content Creation/Modification
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection
Retain Live Chat <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
BuddyForms Moderation <= 1.4.16 - Authenticated Stored Cross-Site Scripting
WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning
Related Posts for WordPress <= 2.1.1 - Reflected Cross-Site Scripting
Post to CSV by BestWebSoft <= 1.3.8 - Authenticated (Author+) CSV Injection
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Bricks 1.2 - 1.5.3 - Remote Code Execution
AntiSpam by CleanTalk <= 5.185 - Authenticated (Administrator+) SQL Injection
Quick Restaurant Menu <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery
Media Library Folders <= 7.1.1 - Cross-Site Request Forgery
WZone - Lite <= 3.1 - Cross-Site Request Forgery
Kadence WooCommerce Email Designer <= 1.5.6 - PHP Object Injection
Plugin LBstopattack <= 1.1.2 - Cross-Site Request Forgery
All In One WP Security & Firewall 5.0.0 - 5.0.7 - Protection Bypass via IP Spoofing
CRM Perks Forms <= 1.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.