Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersPage-list <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
wpDiscuz <= 7.6.33 - Missing Authorization
Helpie FAQ <= 1.45 - Unauthenticated Sensitive Information Exposure
Pinterest Pinboard Widget <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CardCom Payment Gateway <= 3.5.0.4 - Missing Authorization
Qubely <= 1.8.14 - Missing Authorization
IP Based Login <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
All In One SEO Pack <= 4.8.7.1 - Missing Authorization
Show Pages List <= 1.2.0 - Cross-Site Request Forgery
Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion
SALESmanago <= 3.8.1 - Missing Authorization
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
WP Advanced PDF <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
SEO Backlink Monitor <= 1.6.0 - Cross-Site Request Forgery
RIS Version Switcher – Downgrade or Upgrade WP Versions Easily <= 1.0 - Cross-Site Request Forgery
xili-language <= 2.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Append extensions on Pages <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Penci Filter Everything < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Members <= 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Heureka <= 1.1.0 - Missing Authorization
Interact: Embed A Quiz On Your Site <= 3.1 - Cross-Site Request Forgery
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
Skimlinks Affiliate Marketing Tool <= 1.3 - Authenticated (Administrator+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.