Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersGiveWP <= 2.5.9 - Missing Authorization to Settings Update
Elementor Website Builder <= 2.7.4 - Arbitrary File Upload
Email Templates <= 1.3 - HTML Injection
WP HTML Mail < 2.9.1 - HTML Injection
WP HTML Mail < 2.2.11 - HTML injection
Bridge Theme <= 18.2, Qode Instagram Widget <=2.0.1, Qode Twitter Feed <= 2.0.0 - Open Redirect
All In One SEO Pack <= 3.2.6 - Stored Cross-Site Scripting
WordPress Core < 5.2.4 - Server Side Request Forgery #2
WordPress Core < 5.2.4 - Authorization Bypass
Popup-Maker <= 1.8.12 - Unauthenticated information disclosure
WordPress Core < 5.2.4 - Cache Poisoning
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery
GiveWP <= 2.5.4 - Authorization Bypass
SlickQuiz <= 1.3.7.1 - Stored Cross-Site Scripting
Portrait-Archiv.com Photostore < 3.2 - Reflected Cross-Site Scripting
WooCommerce Product Feed for Google, Facebook, eBay and Many More <= 3.1.14 - Reflected Cross-Site Scripting
WP Private Content Plus <= 1.31 - Unauthenticated Settings Change
WP DSGVO Tools (GDPR) <= 2.2.18 - Cross-Site Scripting
WooCommerce PayU India <= 2.1.1 - Improper Input Validation
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
All In One WP Security & Firewall <= 4.0.8 - SQL Injection
Contact Form Email <= 1.2.65 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.