Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersDatabase Sync <= 0.5.1 - Authenticated (Subscriber+) Sensitive Information Exposure
HM Portfolio <= 1.1.1 - Reflected Cross-Site Scripting
WP Options Editor <= 1.1 - Cross-Site Request Forgery to Privilege Escalation
Delete All Posts <= 1.1.1 - Missing Authorization
azurecurve Floating Featured <= 2.2.0 - Reflected Cross-Site Scripting
PAFacile <= 2.6.1 - Reflected Cross-Site Scripting
SpiderDisplay <= 1.9.1 - Reflected Cross-Site Scripting
Flying Twitter Birds <= 1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Notifications Center <= 1.5.2 - Reflected Cross-Site Scripting
W3SPEEDSTER <= 7.33 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Spiderpowa Embed PDF <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wibstats <= 0.5.5 - Reflected Cross-Site Scripting
Simple Project Manager <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ECT Add to Cart Button <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Accessibility Task Manager <= 1.2.1 - Reflected Cross-Site Scripting
Form To JSON <= 1.0 - Reflected Cross-Site Scripting
Podčlánková inzerce <= 2.4.0 - Reflected Cross-Site Scripting
WPDB to Sql <= 1.2 - Unauthenticated Sensitive Information Exposure
CC Circle Progress Bar <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WH Cache & Security <= 1.1.2 - Reflected Cross-Site Scripting
ChatGPT Open AI Images & Content for WooCommerce <= 2.2.0 - Reflected Cross-Site Scipting
WM Options Import Export <= 1.0.1 - Unauthenticated Information Exposure
DX Sales CRM <= 1.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.