Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersEn Masse <= 1.0 - Reflected Cross-Site Scripting
custom-post-edit <= 1.0.4 - Reflected Cross-Site Scripting
Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'
Off Page SEO <= 3.0.3 - Reflected Cross-Site Scripting
Hide My WP Ghost <= 5.4.01 - Unauthenticated Local File Inclusion
Pixobe Cartography <= 1.0.1 - Reflected Cross-Site Scripting
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Permalink Suffix Update
CG Button <= 1.0.5.6 - Reflected Cross-Site Scripting
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Header/Footer/Body Script Update
HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Zielke Design Project Gallery <= 2.5.0 - Reflected Cross-Site Scripting
WP Database Audit <= 1.0 - Reflected Cross-Site Scripting
WordPress/Plugin Upgrade Time Out Plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Narnoo Operator <= 2.0.0 - Reflected Cross-Site Scripting
Management-screen-droptiles <= 1.0 - Reflected Cross-Site Scripting
Your Lightbox <= 1.0 - Reflected Cross-Site Scripting
LIVE TV <= 1.2 - Reflected Cross-Site Scripting
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function
AHAthat Plugin <= 1.6 - Authenticated (Administrator+) SQL Injection via id Parameter
ULTIMATE VIDEO GALLERY <= 1.4 - Reflected Cross-Site Scripting
Snow Storm <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.