Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP Intercom Slack <= 1.2.1 - Sensitive Information Disclosure
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Information Disclosure
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.0 - Cross-Site Request Forgery
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Unauthenticated Arbitrary File Deletion
IgniteUp – Coming Soon and Maintenance Mode <= 3.4 - Stored Cross-Site Scripting
MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting
Safe SVG <= 1.9.5 - Cross-Site Scripting
Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation
Safe SVG <= 1.9.4 - Denial of Service
Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Safe SVG <= 1.9.4 - Denial of Service
GiveWP <= 2.5.9 - Missing Authorization to Settings Update
Elementor Website Builder <= 2.7.4 - Arbitrary File Upload
Email Templates <= 1.3 - HTML Injection
WP HTML Mail < 2.9.1 - HTML Injection
WP HTML Mail < 2.2.11 - HTML injection
About Author <= 1.3.9 - Authenticated Stored Cross-Site Scripting
Noo JobMonster < 4.5.2.9 - Reflected Cross-Site Scripting
Groundhogg <= 1.3.11.13 - SQL Injection
Sliced Invoices <= 3.8.2 - Reflected Cross-Site Scripting
Bridge Theme <= 18.2, Qode Instagram Widget <=2.0.1, Qode Twitter Feed <= 2.0.0 - Open Redirect
InJob | Multi features for recruitment WordPress Theme < 3.3.8 - Cross-Site Scripting
SyntaxHighlighter Evolved < 3.5.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.