Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions
Kaswara Modern VC Addons <= 3.0.1 - Arbitrary File Upload
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation
Ultimate Maps by Supsystic <= 1.2.4 - Reflected Cross-Site scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting <= 1.5.68 - Reflected Cross-Site Scripting
Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting
Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting
404 SEO Redirection <= 1.3 - Cross-Site Request Forgery
All 404 Redirect to Homepage < 1.21 - Reflected Cross-Site Scripting via tab Parameter
404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting
SEO Redirection <= 6.4 - Authenticated Stored Cross-Site Scripting
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.10.2 - Cross-Site Request Forgery
Download Manager <= 3.1.17 - Missing Authorization
WordPress Core < 5.7.1 - Sensitive Information Disclosure
WordPress Core < 5.7.1 - XXE Injection
Clever Addons for Elementor <=2.0.15 - Stored Cross-Site Scripting
User Rights Access Manager <= 1.0.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.