Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersre.place <= 0.2.1 - Cross-Site Request Forgery
Virusdie <= 1.1.3 - Cross-Site Request Forgery
WP Forum Server <= 1.8.2 - Cross-Site Request Forgery
Slickstream <= 2.0.3 - Cross-Site Request Forgery
Audio Editor & Recorder <= 2.2.3 - Unauthenticated Information Exposure
Image Slider With Description <= 9.2 - Cross-Site Request Forgery
HT Mega – Absolute Addons for WPBakery Page Builder <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Beauty Contact Popup Form <= 6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress CTA <= 1.7.0 - Cross-Site Request Forgery
WP DataTable <= 0.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce PDF Invoice Builder <= 1.2.148 - Cross-Site Request Forgery
Import external attachments <= 1.5.12 - Cross-Site Request Forgery
Football Pool <= 2.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Track Everything <= 2.0.1 - Cross-Site Request Forgery
VR <= 8.5.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Społecznościowa 6 PL 2013 <= 2.0.6 - Cross-Site Request Forgery
Plugin Inspector <= 1.5 - Authenticated (Admin+) Arbitrary File Download
File Manager Plugin For Wordpress <= 7.5 - Authenticated (Admin+) Arbitrary File Upload
Cookiebot <= 4.5.8 - Cross-Site Request Forgery
WPB Category Slider for WooCommerce <= 1.71 - Authenticated (Contributor+) Local File Inclusion
Aioseo Multibyte Descriptions <= 0.0.6 - Cross-Site Request Forgery
Free Downloads EDD <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dashboard Widget Sidebar <= 1.2.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.