Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersLogin by Auth0 <= 3.11.3 - Insecure Direct Object Reference
LifterLMS Wordpress Plugin <= 3.37.14 - Arbitrary File Write
Login by Auth0 Plugin <= 3.11.3 - Stored Cross-Site Scripting
Elementor Website Builder <= 2.9.5 - Authorization Bypass
Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization
Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting
Custom Searchable Data Entry System <= 1.7.1 - SQL Injection
CM Pop-Up banners <= 1.4.10 - Authenticated Stored Cross-Site Scripting
Xenon - Bootstrap Admin Theme with AngularJS <= 1.3 - Reflected Cross-Site Scripting
IMPress for IDX Broker <= 2.6.1 - Authenticated Stored Cross-Site Scripting
IMPress for IDX Broker <= 2.6.1 - Authenticated Arbitrary Post Creation, Modification, and Deletion
Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
Data Tables Generator by Supsystic <= 1.9.91 - Cross-Site Request Forgery
Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure
Data Tables Generator by Supsystic <= 1.9.91 - Missing Authorization on AJAX Actions
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Read More Without Refresh <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
All Import Pro Plugin < 4.1.2 - SQL injection
Advanced Ads <= 1.17.3 - Reflected Cross-Site Scripting
Accordion <= 2.2.8 - Unprotected AJAX Action to Stored/Reflected Cross-Site Scripting
Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Newsletter <= 6.5.3 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.