Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMinimum Password Strength <= 1.2.0 - Cross-Site Request Forgery
Contact Form 7 Star Rating <= 1.10 - Authenticated (Editor+) Stored Cross-Site Scripting
PlayerJS <= 2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bravo Search & Replace <= 1.0 - Authenticated (Administrator+) SQL Injection
Yawave <= 2.9.1 - Unauthenticated SQL Injection
Table of Contents Block <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hover Image Button <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
Booknetic <= 4.0.9 - Cross-Site Request Forgery
WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
Simple Google Sitemap <= 1.6 - Cross-Site Request Forgery
WP About Author <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Direct Checkout Button for WooCommerce <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Reactive Mortgage Calculator <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
无觅相关文章插件 <= 1.0.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
All-In-One Cufon <= 1.3.0 - Cross-Site Request Forgery
PiwigoPress <= 2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Website Builder <= 3.25.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue <= 1.5 - Missing Authorization to Authenticated (Editor+) Settings Update
Archive Page <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Phee's LinkPreview <= 1.6.7 - Cross-Site Request Forgery
Sticky Header On Scroll <= 1.0 - Missing Authorization
WooCommerce Recargo de Equivalencia <= 1.6.24 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.