Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersRaptor Editor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Time Slot <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API
WooCommerce PDF Invoices & Packing Slips <= 3.8.6 - Missing Authorization
Order Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message
Mapster WP Maps <= 1.5.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
EmbedPress <= 4.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Survey Maker <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Booking System <= 2.0.19.10 - Missing Authorization via wpbs_refresh_calendar_editor
Greenshift – animation and page builder blocks <=9.7 - Missing Authorization
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Beaver Builder <= 2.8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced Sermons <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Abstracts <= 2.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution
Templately <= 3.1.5 - Missing Authorization via AJAX actions
WPS Telegram Chat <= 4.6.0 - Missing Authorization to Information Exposure
Flatsome <= 3.19.6 - Missing Authorization
Astra Widgets <= 1.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Image Map Pro <= 6.0.20 - Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Delete
Premium SEO Pack <= 1.6.001 - Authenticated (Contributor+) SQL Injection
Nexter Blocks <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.