Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Blockspare <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Time Clock <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
CBX Map for Google Map & OpenStreetMap <= 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Martins Free Monetized Ad Exchange Network <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CookieCode <= 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP-CRM System <= 3.4.5 - Authenticated (Administrator+) PHP Object Injection
GamiPress <= 7.3.7 - Authenticated (Contributor+) Local File Inclusion
Inline Related Posts <= 3.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sidebar Manager Light <= 1.18 - Cross-Site Request Forgery
WP Maintenance <= 6.1.9.7 - Authenticated (Administrator+) PHP Object Injection
LiteSpeed Cache <= 7.0.1 - Authenticated (Editor+) Server-Side Request Forgery
GS Testimonial Slider <= 3.2.9 - Unauthenticated Arbitrary Shortcode Execution
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.8 - Authenticated (Shop manager+) SQL Injection
Open Close WooCommerce Store <= 4.9.5 - Authenticated (Contributor+) Local File Inclusion
Challan <= 3.7.58 - Cross-Site Request Forgery to Arbitrary Options Update
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Load More <= 7.3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
DoFollow Case by Case <= 3.5.1 - Cross-Site Request Forgery
Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Submission DOM tracking for Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Unauthenticated Server-Side Request Forgery
Soccer Live Scores <= 1.0.5 - Cross-Site Request Forgery
Color Your Bar <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.