Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
BlockWheels <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Astra Security Suite <= 0.2 - Missing Authorization
Black Widgets For Elementor <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Footnotes for WordPress <= 2016.1230 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Event Booking <= 2.8.4 - Reflected Cross-Site Scripting
CLP – Custom Login Page by NiteoThemes <= 1.5.5 - Cross-Site Request Forgery
Limit Max IPs Per User <= 1.5 - Reflected Cross-Site Scripting
Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more <= 1.4.0 - Cross-Site Request Forgery
Watu Quiz <= 3.4.2 - Reflected Cross-Site Scripting
ShortPixel Adaptive Images <= 3.10.0 - Missing Authorization
JS Job Manager <= 2.0.2 - Authenticated Insecure Direct Object Reference
Cache control by Cacholong <= 5.4.1 - Cross-Site Request Forgery
Eventbee RSVP Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Nemesis All-in-One <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
JS Job Manager <= 2.0.2 - Missing Authorization
pCloud Backup <= 1.0.1 - Missing Authorization
Bulk Fields Editor <= 1.8.0 - Missing Authorization
UPC/EAN/GTIN Code Generator <= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Webling <= 3.9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Pearl <= 1.3.9 - Missing Authorization
Frizzly <= 1.1.0 - Reflected Cross-Site Scripting
Piotnet Forms <= 1.0.30 - Authenticated (Author+) Stored Cross-Site Scripting
WebberZone Snippetz <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.