Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMMX – Make Me Christmas <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Social Stream Designer <= 1.3 - Authenticated (Administrator+) SQL Injection
Aria Font <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Language Field <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Age Gate <= 3.5.4 - Missing Authorization
SEO Help <= 6.6.1 - Authenticated (Admin+) Server-Side Request Forgery
More Mime Type Filters <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Site Table of Contents <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Show Stats <= 1.5 - Cross-Site Request Forgery
Cross-Site Request Forgery to Stored Cross-Site Scripting
Oppso Unit Converter <= 1.1.1 - Reflected Cross-Site Scripting
Nav Menu Manager <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Waymark <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate Bootstrap Elements for Elementor <= 1.4.9 - Unauthenticated Local File Inclusion
ChillPay WooCommerce <= 2.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Woo Product Feed For Marketing Channels <= 1.9.0 - Missing Authorization
ABA PayWay Payment Gateway for WooCommerce <= 2.1.4 - Reflected Cross-Site Scripting
Social Bookmarking RELOADED <= 3.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Photography <= 7.5.2 - Unauthenticated Server-Side Request Forgery
Wishlist <= 1.0.44 - Authenticated (Subscriber+) SQL Injection
VKontakte Cross-Post <= 0.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Material Dashboard <= 1.4.5 - Authenticated (Subscriber+) Local File Inclusion
Chat2 <= 4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.