Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersHR Management Lite <= 3.7 - Cross-Site Request Forgery
Activity Plus Reloaded for BuddyPress <= 1.1.2 - Missing Authorization
WP Security Master <= 1.0.2 - Cross-Site Request Forgery
Frontend Dashboard <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
RTMKit Addons for Elementor <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accessibility Suite <= 4.19 - Missing Authorization
Calculated Fields Form <= 5.3.58 - Cross-Site Request Forgery
Bang tinh vay <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Gravity Forms Salesforce <= 1.4.7 - Open Redirect
GPP Slideshow <= 1.3.5 - Missing Authorization
Wp Easy Allopass <= 4.1.1 - Cross-Site Request Forgery
Raychat <= 2.1.0 - Missing Authorization
Print Invoice & Delivery Notes for WooCommerce <= 5.5.0 - Cross-Site Request Forgery
TicketBAI Facturas para WooCommerce <= 3.21 - Missing Authorization
POEditor <= 0.9.10 - Cross-Site Request Forgery
ShortLinks Pro <= 1.0.7 - Authenticated (Administrator+) SQL Injection
Direct Checkout for WooCommerce Lite <= 1.0.3 - Missing Authorization
Crawlomatic Multisite Scraper Post Generator <= 2.6.8.2 - Missing Authorization
HT Team Member <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Recall <= 16.26.14 - Cross-Site Request Forgery
Pinterest Verify Meta Tag <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirect
The Holiday Calendar <= 1.18.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.