Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersBreaking News Ticker <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Graceful Email Obfuscation <= 0.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
GlobalQuran <= 1.0 - Cross-Site Request Forgery to Settings Update
CWD – Stealth Links <= 1.3 - Unauthenticated SQL Injection
BookPress – For Book Authors <= 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
RSS in Page <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Survey Maker <= 5.1.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Custom Links On Admin Dashboard Toolbar <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Theasys <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Job Board Manager <= 2.1.60 - Reflected Cross-Site Scripting
VR-Frases <= 4.0.1 - Reflected Cross-Site Scripting
Include Mastodon Feed <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Optimate Ads <= 1.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read More Copy Link <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Show notice or message on admin area <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP doodlez <= 1.0.10 - Unauthenticated Stored Cross-Site Scripting
WP Spell Check <= 9.21 - Cross-Site Request Forgery
Print PDF Generator and Publisher <= 1.2.0 - Cross-Site Request Forgery
Image Rotator <= 2.0 - Reflected Cross-Site Scripting
Links in Captions <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Select All Text Box <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.