Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersGallery Lightbox <= 1.0.0.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPMK PDF Generator <= 1.0.1 - Cross-Site Request Forgery
Accordion FAQ <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
WP Category Dropdown <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
MaxiBlocks <= 2.1.3 - Missing Authorization
Javo Core <= 3.0.0.266 - Missing Authorization
Double the Donation <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Force Update Translations <= 0.5 - Cross-Site Request Forgery
Team <= 5.0.6 - Missing Authorization
Fastly <= 1.2.28 - Cross-Site Request Forgery
Revive.so <= 2.0.6 - Missing Authorization
Podlove Subscribe button <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slightly troublesome permalink <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Event Rocket <= 3.3 - Missing Authorization
BuddyPress Notification Widget <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Printeers Print & Ship <= 1.17.0 - Cross-Site Request Forgery
StylePress for Elementor <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Current Age Plugin <= 1.6 - Cross-Site Request Forgery
Website Chat Button: Kommo integration <= 1.3.1 - Missing Authorization
Academy LMS <= 3.3.4 - Authenticated (Academy Instructor+) Insecure Direct Object Reference
Ongkoskirim.id <= 1.0.6 - Missing Authorization
Zoho Billing <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Adverts <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.