Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete
WP Cost Estimation < 9.660 - Upload Directory Traversal
Jetpack < 7.0.1 - Cross-Site Scripting
Newspaper < 9.2.2 - Cross-Site Scripting
Accessibility Suite by Online ADA < 2.0.11 - SQL Injection
Superlist - Directory WordPress Theme | Directory & Listings <= 2.9.2 - Stored Cross-Site Scripting
Simple Social Media Share Buttons 2.0.4 - 2.0.21 - Missing Authorization
Forminator Plugin <= 1.5.3.1 - SQL Injection
Forminator Plugin <= 1.5.4 - Cross-Site Scripting
GiveWP <= 2.3.0 - Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.2.7 - Reflected Cross-Site Scripting
WP Live Chat Support <= 8.0.17 - Cross-Site Scripting
WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting
YOP Poll <= 6.0.2 - Reflected Cross-Site Scripting via poll_id Parameter
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
KingComposer <= 2.8 - Reflected Cross-Site Scripting
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
NextGen Gallery <= 3.1.5 - PHP Object Injection
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
Parallax Scroll <= 2.0.1 - Cross-Site Scripting
Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter
Meta Box <= 4.16.1 - Mishandling of File Upload
OneLogin SAML SSO <= 2.8.0 - Distributed Denial-of-Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.