Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Atelier Create CV <= 1.1.5 - Cross-Site Request Forgery to Settings Update
PDF for WPForms <= 5.5.0 - Missing Authorization
Backwp <= 2.0.2 - Cross-Site Request Forgery
Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordLift <= 3.54.4 - Missing Authorization
WC Vendors Marketplace <= 2.5.6 - Authenticated (Administrator+) SQL Injection
WP Media File Type Manager <= 2.3.0 - Cross-Site Request Forgery to Settings Update
oik <= 4.15.1 - Missing Authorization
Interactive Regional Map of Florida <= 1.0 - Missing Authorization
Newspack Newsletters <= 3.13.0 - Open Redirect
WP Compress for MainWP <= 6.30.32 - Missing Authorization
onOffice for WP-Websites <= 5.7 - Missing Authorization
Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross-Site Request Forgery
Trinity Audio <= 5.20.0 - Missing Authorization
Sola Support Ticket <= 3.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery
WP Biographia <= 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Abbie Expander <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Bacon Ipsum <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
404 Page by SeedProd <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Live Chat + Chatbots Plugin for WordPress – Chaport <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Admin Notes <= 1.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.