Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP Gravity Forms Dynamics CRM <= 1.1.4 - Open Redirect
Ovation Elements <= 1.1.2 - Missing Authorization
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure
WP DPE-GES <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Display Remote Posts Block <= 1.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Listamester <= 2.3.6 - Cross-Site Request Forgery
ELI's Related Posts Footer Links and Widget <= 1.2.04.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Show All Comments <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
ContentStudio <= 1.3.5 - Missing Authorization
theMarketer <= 1.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GS Testimonial Slider <= 3.3.0 - Missing Authorization
Display Eventbrite Events <= 6.2.6 - Authenticated (Contributor+) Local File Inclusion
JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
PublishPress Authors <= 4.7.5 - Authenticated (Contributor+) Local File Inclusion
WP Hotel Booking <= 2.1.9 - Cross-Site Request Forgery
WPAdverts <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion
Bulk Featured Image <= 1.2.1 - Missing Authorization
Meks Flexible Shortcodes <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP jQuery DataTable <= 4.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Top 10 <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hash Form <= 1.2.8 - Cross-Site Request Forgery
SKT Skill Bar <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.