Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersInsert HTML Here <= 1.0 - Reflected Cross-Site Scripting
Build App Online <= 1.0.23 - Unauthenticated Local File Inclusion
Task Scheduler <= 1.6.3 - Reflected Cross-Site Scripting
WP-Planification <= 2.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WebinarPress <= 1.33.27 - Open Redirect
Admin Menu Post List <= 2.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Buddypress Humanity <= 1.2 - Cross-Site Request Forgery to Privilege Escalation
WooCommerce Multilingual & Multicurrency <= 5.3.8 - Missing Authorization
Simple Post Meta Manager <= 1.0.9 - Reflected Cross-Site Scripting
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
WP Remote Thumbnail <= 1.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Site Notify <= 1.0 - Missing Authorization
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.