Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWP VR <= 8.5.4 - Missing Authorization
Table of Contents Plus <= 2411 - Authenticated (Editor+) Stored Cross-Site Scripting
WP ULike <= 4.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Pinpoint Booking System <= 2.9.9.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Accordion Slider <= 1.9.11 - Authenticted (Contributor+) Stored Cross-Site Scripting via HTML Attribute
File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload
Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cooked Pro < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kama SpamBlock <= 1.8.2 - Reflected Cross-Site Scripting
Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting
Akismet htaccess writer <= 1.0.1 - Reflected Cross-Site Scripting
Admin Management Xtended <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Edwiser Bridge <= 3.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Multiline files upload for contact form 7 <= 2.8.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Responsive Lightbox <= 2.4.8 - Authenticated (Author+) Stored Cross-Site Scripting
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
My Reading Library <= 1.0 - Unauthenticated PHP Object Injection
Lightbox slider – Responsive Lightbox Gallery <= 1.10.2 - Authenticated (Author+) Stored Cross-Site Scripting
Surfer <= 1.5.0.502 - Authenticated (Administrator+) SQL Injection
AppPresser – Mobile App Framework <= 4.4.4 - Privilege Escalation and Account Takeover via Weak OTP
Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload
VKontakte Wall Post <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.