Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersDELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
Export Users to CSV < 1.4 - CSV Injection
WooCommerce AJAX Product Filters <= 1.3.6 - Arbitrary Settings Update
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.6.24 - Unauthenticated Stored Cross-Site Scripting
Woody Ad Snippets <= 2.2.8 - Authenticated Cross-Site Scripting
Easy!Appointments <= 1.3.2 - Information Disclosure
Human Presence – Stop Form Spam Without ReCaptcha < 2.0.9 - Reflected Cross-Site Scripting
Server Log Viewer <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via custom-write-panel-id Parameter
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter
SlickQuiz <= 1.3.7.1 - Stored Cross-Site Scripting
Checklist <= 1.1.8 - Cross-Site Scripting
Groundhogg <= 2.0.8.1 - Reflected Cross-Site Scripting
Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
LMS by LifterLMS <= 3.35.0 - Stored Cross-Site Scripting via Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.