Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Shoutcast Icecast HTML5 Radio Player <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
File Upload Types by WPForms <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Simple News <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via news Shortcode
Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode
10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting
Awesome buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn2 Shortcode
BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
UPS Live Rates and Access Points <= 2.3.12 - Missing Authorization to Plugin API key reset
DarkMySite – Advanced Dark Mode Plugin for WordPress <= 1.2.8 - Cross-Site Request Forgery
SEOPress <= 8.1.1 - Missing Authorization
PostX <= 4.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Breeze <= 2.1.14 - Missing Authorization
SEOPress <= 8.1.1 - Missing Authorization
Import and export users and customers <= 1.27.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Breeze <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Firelight Lightbox <= 2.3.3 - Authenticated (Author+) Stored Cross-Site Scripting
Conditional Fields for Contact Form 7 <= 2.4.15 - Authenticated (Editor+) Stored Cross-Site Scripting
PDF Generator Addon for Elementor Page Builder <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
NewsCard <= 1.3 - Unauthenticated Local File Inclusion
Themes4WP YouTube External Subtitles <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Stripe Donation and Payment Plugin <= 3.2.3 - Missing Authorization
Amilia Store <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.