Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWorkbox Video from Vimeo & Youtube <= 3.2.2 - Reflected Cross-Site Scripting
CG Scroll To Top <= 3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Flexi – Guest Submit <= 4.28 - Unauthenticated Local File Inclusion
WP-BusinessDirectory <= 3.1.2 - Unauthenticated Arbitrary File Deletion
Accordion <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
Interactive US Map <= 2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DeBounce Email Validator <= 5.8.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easyfonts <= 1.1.2 - Cross-Site Request Forgery
MyWorks WooCommerce Sync for QuickBooks Online <= 2.9.1 - Reflected Cross-Site Scripting
Seo Meta Tags <= 1.4 - Cross-Site Request Forgery to Privilege Escalation
Anant Addons for Elementor <= 1.1.8 - Cross-Site Request Forgery to Arbitrary Plugin Installation
All push notification for WP <= 1.5.3 - Cross-Site Request Forgery to SQL Injection
Waymark <= 1.5.2 - Authenticated (Contributor+) Server-Side Request Forgery
WP w3all phpBB <= 2.9.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Print Science Designer <= 1.3.155 - Unauthenticated Arbitrary File Download
Nimbata Call Tracking <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
MapSVG Lite <= 8.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Easy Menu <= 0.41 - Cross-Site Request Forgery to Stored Cross-Site Scripting
One Click Accessibility <= 3.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
IP2Location World Clock <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Twispay Credit Card Payments <= 2.1.2 - Reflected Cross-Site Scripting
SEO, Nutrition and Print for Recipes by Edamam <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ePaper Lister for Yumpu <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.