Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersMedia Library Assistant <= 2.81 - Authenticated Cross-Site Scripting
Media Library Assistant <= 2.81 - Remote Code Execution via tax_query, meta_query, date_query Parameters
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
WordPress Core < 5.3.1 - Stored Cross-Site Scripting via Block Editor
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
Ultimate Addons for Elementor < 1.20.1 - Authentication Bypass
Custom Body Class <= 0.6.0 - Cross-Site Scripting
Ultimate Addons for Beaver Builder <= 1.24.0 - Authentication Bypass
Custom Body Class <= 0.6.0 - Cross-Site Request Forgery
Rencontre – Dating Site <= 3.2.2 - Cross-Site Request Forgery
Scoutnet Kalender <= 1.1.0 - Cross-Site Scripting
CSS Hero <= 4.0.3 - Reflected Cross-Site Scripting
Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update
Neon - Bootstrap Admin Theme <= 2.0 - Cross-Site Scripting
WordPress Core < 5.3.1 - Authorization Bypass
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Reflected Cross-Site Scripting
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
WP Spell Check <= 7.1.9 - Cross-Site Request Forgery
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated Option Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.