Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersJetWooBuilder <= 2.1.18 - Missing Authorization
Style Manager < 2.3.0 - Cross-Site Request Forgery to Settings Update
Payment Form for PayPal Pro <= 1.1.72 - Authenticated (Administrator+) Stored Cross-Site Scripting
Social Media Links <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
IP2Location Variables <= 2.9.5 - Cross-Site Request Forgery
Target Video Easy Publish <= 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Vitepos <= 3.1.7 - Missing Authorization
Docket Cache <= 24.07.02 - Unauthenticated Local File Inclusion
WP Post to PDF Enhanced <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Maps <= 0.98 - Cross-Site Request Forgery
WPCafe <= 2.2.32 - Authenticated (Contributor+) Local File Inclusion
Advanced Dynamic Pricing for WooCommerce <= 4.9.3 - Cross-Site Request Forgery to Settings Update
spam-stopper <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting
WP Twitter Button <= 1.4.1 - Cross-Site Request Forgery
Booking and Rental Manager <= 2.2.8 - Missing Authorization
translit it! <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Dashboard Notepads <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Bulk Page Stub Creator <= 1.1 - Reflected Cross-Site Scripting
WordPress Video Robot - The Ultimate Video Importer <= 1.20.0 - Reflected Cross-Site Scripting
JetTabs <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPAMS <= 44.0 (17-08-2023) - Unauthenticated Arbitrary File Upload
Bknewsticker <= 1.0.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.