Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersSogrid <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Options Update
Simple Presenter <= 1.5.1 - Reflected Cross-Site Scripting
Amazon Product Price <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
I Plant A Tree <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
VForm <= 3.0.0 - Reflected Cross-Site Scripting
Video & Photo Gallery for Ultimate Member <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
J&T Express Malaysia <= 2.0.13 - Reflected Cross-Site Scripting via [placeholder]
Integrate Firebase <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Media Shortcodes <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Downloader <= 0.4.7.4 - Reflected Cross-Site Scripting
WP GeoNames <= 1.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting
Planaday API <= 11.4 - Reflected Cross-Site Scripting
GEO my WordPress <= 4.5.0.4 - Missing Authorization via get_field_options_ajax
Staggs Product Configurator for WooCommerce <= 2.0.0 - Reflected Cross-Site Scripting
Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
Vimeography <= 2.4.4 - Sensitive Information Exposure
FloristPress <= 7.2.0 - Reflected Cross-Site Scripting
AutoWP <= 2.0.8 - Cross-Site Request Forgery
Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation
Notibar <= 2.1.4 - Missing Authorization via ajax_install_plugin
ForumWP <= 2.1.0 - Unauthenticated PHP Object Injection
News Ticker for Elementor <= 2.1.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.