Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersSticky HTML5 Music Player <= 3.1.6 - Authenticated (Contributor+) SQL Injection
WP Notes Widget <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Link Directory Pro < 14.8.1 - Missing Authorization
Sticky Radio Player <= 3.4 - Authenticated (Contributor+) SQL Injection
Seven Stars <= 1.4.4 - Cross-Site Request Forgery
WP JobHunt <= 7.1 - Unauthenticated Insecure Direct Object Reference
MapSVG <= 8.5.34 - Unauthenticated Arbitrary Shortcode Execution
EventON (Pro) <= 4.9.9 - Missing Authorization
Short URL <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
CSS3 Accordions for WordPress <= 3.0 - Missing Authorization
WordPress Events Calendar Registration & Tickets <= 2.6.0 - Unauthenticated PHP Object Injection
Broadstreet <= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Push notification for Mobile and Web app <= 2.0.3 - Missing Authorization
AlT Monitoring <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WHMpress <= 6.2-revision-9 - Authenticated (Contributor+) Local File Inclusion
Interview <= 1.01 - Authenticated (Contributor+) SQL Injection
BERTHA AI <= 1.12.11 - Missing Authorization
Wordpress Auto Spinner <= 3.25.0 - Missing Authorization
RS WP Book Showcase <= 6.7.70 - Unauthenticated Arbitrary Shortcode Execution
Wishlist <= 2.1.0 - Missing Authorization
Nasa Core < 6.4.4 - Authenticated (Contributor+) Local File Inclusion
Plant - Gardening & Houseplants WordPress Theme <= 1.0.0 - Unauthenticated Information Exposure
Wishlist <= 2.1.0 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.