Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSRS Simple Hits Counter Plugin for WordPress 1.03 - 1.04 - Unauthenticated SQL Injection
Kormosala <= 1.0.22 - Reflected Cross-Site Scripting
Wise Chat <= 2.8.3 - CSV Injection
Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scripting
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
Elementor Website Builder <= 2.9.13 - Authenticated Stored Cross-Site Scripting
Power's WHOIS Domain Check <= 0.9.31 - Authenticated Stored Cross-Site Scripting
Adning Advertising <= 1.5.5 - Arbitrary File Upload
Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization
Careerfy <= 4.0.0 - Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Stored Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Stored Cross-Site Scripting
JobSearch WP Job Board <= 1.5.2 - Authenticated Stored Cross-Site Scripting
JobSearch WP Job Board <= 1.5.2 - Reflected Cross-Site Scripting
Testimonials Widget <= 3.5.1 - Multiple Authenticated Stored Cross-Site Scripting
CareerUp < 2.3.1 - Reflected Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Reflected Cross-Site Scripting
JobSearch WP Job Board <= 1.5.1 - Stored Cross-Site Scripting
CarePlus - Health & Medical Responsive WordPress Theme <= 1.2 - Cross-Site Scripting
Jetapo | Jobboard WordPress Theme and Jetapo | Jobboard WordPress Theme with WooCommerce < 1.1 - Cross-Site Scripting
Payment Form for PayPal Pro < 1.1.65 - SQL Injection
InJob | Multi features for recruitment WordPress Theme <= 3.4.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.