Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersRS-Members <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
Crazy Call To Action Box <= 1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ahmeti Wp Timeline <= 5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
wpPricing Builder <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Rating with Custom Login <= 1.1 - Unauthenticated SQL Injection
Recently <= 1.1 - Unauthenticated PHP Object Injection
El mejor Cluster <= 1.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Spreadplugin <= 4.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
IdeaPush <= 8.69 - Cross-Site Request Forgery
Plexx Elementor Extension <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cookie Scanner <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload
My Favorites <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Blocks <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Arkhe Blocks <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Linked Variation for WooCommerce <= 1.0.5 - Cross-Site Request Forgery
my flatonica <= 0.0.8 & my wooden under construction <= 2.0.7 - Reflected Cross-Site Scripting
ShortPixel Image Optimizer <= 5.6.3 - Authenticated (Editor+) SQL Injection
Contact Form by Supsystic <= 1.7.28 - Authenticated (Admin+) Remote Code Execution
Happy Addons for Elementor <= 3.12.3 - Missing Authorization
ShortPixel Image Optimizer <= 5.6.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.