Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersGravity Forms Toolbar <= 1.7.0 - Reflected Cross-Site Scripting
Advanced Woo Labels <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting
Top Bar – PopUps – by WPOptin <= 2.0.1 - Unauthenticated Local File Inclusion
Create <= 2.9.1 - Authenticated (Author+) Stored Cross-Site Scripting
Iconize <= 1.2.4 - Authenticated (Admin+) Remote Code Execution
Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting
Robokassa payment gateway for Woocommerce <= 1.6.1 - Reflected Cross-Site Scripting
Payflex Payment Gateway <= 2.6.1 - Open Redirect
Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection
LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting
EventPrime <= 4.0.4.5 - Open Redirect
LiteSpeed Cache <= 6.5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Essential Blocks for Gutenberg <= 4.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
Depicter Slider <= 3.2.2 - Missing Authorization
WP-WebAuthn <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cozy Blocks <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
LiteSpeed Cache <= 6.4.1 - Authenticated (Author+) Path Traversal
Include Fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
123.chat - Video Chat <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting
Wechat Social login <= 1.3.0 - Authentication Bypass
WPMobile.App <= 11.50 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.