Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersList Related Attachments <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fresh Framework <= 1.70.0 - Unauthenticated Remote Code Execution
Video.js HLS Player <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
FS Poster <= 6.5.8 - Authenticated (Subscriber+) SQL Injection
Contact Form 7 Star Rating with font Awesome <= 1.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Add Linked Images To Gallery <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
EZ InLinkz linkup <= 0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Private Content <= 8.11.5 - Authenticated (Subscriber+) SQL Injection
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Admin+) PHP Object Injection
Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id
WP Sitemap <= 1.0 - Authenticated (Contributor+) SQL Injection
WP-Asambleas <= 2.85.0 - Unauthenticated Arbitrary Shortcode Execution
Live Streaming Video Player – by SRS Player <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pie Register Premium <= 3.8.3.2 - Missing Authorization
WP-PostRatings Cheater <= 1.5 - Cross-Site Request Forgery
Namaste! LMS <= 2.6.5 - Cross-Site Request Forgery
Ibtana <= 1.2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Gallery ( Responsive ) <= 4.0 - Cross-Site Request Forgery to Privilege Escalation
WP Social SEO Booster – Knowledge Graph Social Signals SEO <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Display Products by Tags <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woocommerce – Loi Hamon <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Just Variables <= 1.2.3 - Cross-Site Request Forgery
Pathomation <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.