Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersSimple Photo Feed <= 1.4.0 - Missing Authorization
Social Media Plugin by Social Snap <= 1.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Small Package Quotes – For Customers of FedEx <= 4.3.1 - Unauthenticated SQL Injection
LTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
WP Login Control <= 2.0.0 - Reflected Cross-Site Scripting
LTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection
XV Random Quotes <= 1.40 - Reflected Cross-Site Scripting
XV Random Quotes <= 1.40 - Cross-Site Request Forgery to Settings Reset
MediCenter - Health Medical Clinic WordPress Theme <= 14.6 - Missing Authorization
S3Bubble Media Streaming <= 8.0 - Reflected Cross-Site Scripting
Coronavirus (COVID-19) Notice Message <= 1.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Hostiko - Hosting WordPress & WHMCS Theme < 30.1 - Reflected Cross-Site Scripting
Drivr Lite – Google Drive Plugin plugin for WordPress <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
LTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection
Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection
Countdown Timer <= 1.0 - Reflected Cross-Site Scripting
LTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection
Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.