Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSubresource Integrity (SRI) Manager <= 0.4.0 - Missing Authorization
Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery
GD bbPress Tools <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Goracash <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Frontend Admin <= 1.22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure
Kama Click Counter <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure
Sweet Energy Efficiency <= 1.0.8 - Cross-Site Request Forgery
Clariti <= 1.2.1 - Missing Authorization
Quiz Maker <= 6.7.0.64 - Cross-Site Request Forgery
WPLMS <= 4.970 - Missing Authorization
WP Delete User Accounts <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Elementor Addons <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection
NIX Anti-Spam Light <= 0.0.4 - Cross-Site Request Forgery
Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Payrexx Payment Gateway for WooCommerce <= 3.1.5 - Missing Authorization
Emergency Password Reset <= 9.3 - Cross-Site Request Forgery
Upsell Order Bump Offer for WooCommerce <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
SQL Chart Builder <= 2.3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Penci Recipe <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.