Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersGoogle+ Comments <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
ZoloBlocks <= 2.3.11 - Unauthenticated Sever-Side Request Forgery
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Authenticated (Contributor+) SQL Injection
SEO Search Permalink <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Gravity Forms HubSpot <= 1.2.5 - Open Redirect
Conditional Cart Messages for WooCommerce – YourPlugins.com <= 1.2.10 - Cross-Site Request Forgery
Norebro Extra <= 1.6.8 - Unauthenticated Arbitrary Shortcode Execution
WeShare Buttons <= 13.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Icegram Express Pro <= 5.9.13 - Authenticated (Administrator+) PHP Object Injection
Embed Any Document <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Colorbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution
Yext <= 1.1.3 - Missing Authorization
Lenix scss compiler <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
HivePress Claim Listings <= 1.1.3 - Missing Authorization
TweetThis Shortcode <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Markdown Shortcode <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting
Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery
Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure
System Dashboard <= 2.8.20 - Cross-Site Request Forgery
Mapster WP Maps <= 1.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.