Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersSimple Certain Time to Show Content <= 1.2.2 - Reflected Cross-Site Scripting
Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting
WordPress Activity-o-meter <= 1 - Reflected Cross-Site Scripting
pushBIZ – Push Notification <= 1.0 - Reflected Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Post Sync <= 1.1 - Reflected Cross-Site Scripting
NewsTicker <= 1.0 - Reflected Cross-Site Scripting
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
WPMovieLibrary <= 2.1.4.8 - Reflected Cross-Site Scripting
WP Pricing Table <= 1.1 - Reflected Cross-Site Scripting
CalendApp <= 1.1 - Reflected Cross-Site Scripting
Om Stripe <= 02.00.00 - Reflected Cross-Site Scripting
ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion
WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter
Facilita Form Tracker <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Social Stream <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Custom Post RSS Feed <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Music Press Pro <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Distance Rate Shipping For WooCommerce <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Upcasted S3 Offload – AWS S3, Digital Ocean Spaces, Backblaze, Minio and more <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Stylish Google Sheet Reader <= 4.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.