Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersContact Form Submissions <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting
Multisite Content Copier/Updater Pro < 2.1.2 - Reflected Cross-Site Scripting
Cookie Information | Free GDPR Consent Solution <= 2.0.7 - Reflected Cross-Site Scripting
Countdown & Clock <= 2.2.8 - Reflected Cross-Site Scripting
WPCargo <= 6.8.9 - Unauthenticated Remote Code Execution
Patreon WordPress <= 1.8.1 - Authenticated Stored Cross-Site Scripting
Header Footer Code Manager <= 1.1.16 - Reflected Cross-Site Scripting
Essential Addons for Elementor Lite <= 5.0.8 - Reflected Cross-Site Scripting
Zero Spam <= 5.2.10 - Admin+ SQL Injection
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
ARI Stream Quiz – WordPress Quizzes Builder <= 1.2.26 - Reflected Cross-Site Scripting
Kunze Law < 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Sync QCloud COS Plugin < 2.0.1 - Authenticated (Admin+) Cross-Site Scripting
Contact Form 7 Connector <= 1.1.13 - Reflected Cross-Site Scripting
ARI Fancy Lightbox <= 1.3.8 - Reflected Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure
Simple Ajax Chat <= 20220115 - Unauthenticated Stored Cross-Site Scripting
WP Content Copy Protection <= 3.4.4 - Cross-Site Request Forgery to Setting Update
Simple Quotation <= 1.3.2 - Cross-Site Request Forgery
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser
Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results <= 1.1.0 - Missing Authorization to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.