Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersElegant Visitor Counter <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Complete Google Seo Scan <= 3.5.1 - Authenticated (Administrator+) SQL Injection
Melipayamak <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Atelier Create CV <= 1.1.5 - Cross-Site Request Forgery to Settings Update
PDF for WPForms <= 5.5.0 - Missing Authorization
Backwp <= 2.0.2 - Cross-Site Request Forgery
Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordLift <= 3.54.4 - Missing Authorization
WC Vendors Marketplace <= 2.5.6 - Authenticated (Administrator+) SQL Injection
WP Media File Type Manager <= 2.3.0 - Cross-Site Request Forgery to Settings Update
oik <= 4.15.1 - Missing Authorization
Interactive Regional Map of Florida <= 1.0 - Missing Authorization
Newspack Newsletters <= 3.13.0 - Open Redirect
WP Compress for MainWP <= 6.30.32 - Missing Authorization
onOffice for WP-Websites <= 5.7 - Missing Authorization
Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross-Site Request Forgery
Trinity Audio <= 5.20.0 - Missing Authorization
Sola Support Ticket <= 3.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery
WP Biographia <= 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Abbie Expander <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Bacon Ipsum <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.