Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersLearnPress <= 3.2.6.8 - Privilege Escalation via accept-to-be-teacher action parameter
WP Mega Menu <= 1.3.6 - Unauthenticated Settings Update to Stored Cross-Site Scripting
LearnPress <= 3.2.6.8 - Authenticated Page Creation and Status Modification
Rank Math SEO <= 1.0.42.1 - Missing Authorization
Widget Settings Importer/Exporter Plugin <= 1.5.3 - Unauthorized Widget Import to Stored Cross-Site Scripting
TS Poll – Best Poll Plugin for WordPress <1.3.4 - Missing Authorization
Advanced Order Export for WooCommerce <= 3.1.3 - Cross-Site Scripting
Klarna Checkout for WooCommerce <= 2.0.9 - Arbitrary Plugin Installation, Activation and Deactivation
WP Lead Plus X <= 0.99 - Cross-Site Request Forgery
WP Lead Plus X <= 0.98 - Stored Cross-Site Scripting
WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X <= 0.98 - Authenticated Stored Cross-Site Scripting
Car Rental System <= 1.3 - Unauthenticated Stored Cross-Site Scripting
Vanguard - Marketplace Digital Products PHP7 <= 2.1 - Cross-Site Scripting
Online Hotel Booking System Pro <= 1.1 - Cross-Site Scripting
OneTone <= 3.0.6 & OneTone Companion <= 1.1.1 - Stored Cross-Site Scripting
OneTone <= 3.0.6 & OneTone Companion <= 1.1.1 - Unauthenticated Settings Update
WP Last Modified Info <= 1.6.5 - Stored Cross-Site Scripting
WooCommerce Subscriptions <= 3.0.2 - Cross-Site Request Forgery
Contact Form 7 Datepicker <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery
MapPress Maps for WordPress <=2.53.8 - Authenticated Map Creation/Deletion to Stored Cross-Site Scripting & Remote Code Execution
Login by Auth0 <= 3.11.3 - Stored Cross-Site Scripting
LearnDash <= 3.1.5 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.