Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Planyo online reservation system <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementsCSS Addons for Elementor <= 1.0.8.7 - Unauthenticated Server-Side Request Forgery
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
BookingPress <= 1.1.28 - Authenticated (Administrator+) SQL Injection
Simple Map No Api <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Query Wrangler <= 1.5.54 - Cross-Site Request Forgery
PhotoShelter for Photographers Blog Feed Plugin <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
News, Magazine and Blog Elements <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Job Board Manager <= 2.1.60 - Missing Authorization
Ebook Downloader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Publitio <= 2.1.8 - Missing Authorization
Clockinator Lite <= 1.0.7 - Missing Authorization
Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Reflected Cross-Site Scripting
xili-language <= 2.21.2 - Reflected Cross-Site Scripting
Leartes TRY Exchange Rates <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP AdCenter <= 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPSHARE247 Elementor Addons <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Simple HTML Sitemap <= 3.5 - Missing Authorization
Automatic Featured Images from Videos <= 1.2.4 - Missing Authorization
WordPress Galleria <= 1.4 - Reflected Cross-Site Scripting
Theme Duplicator <= 1.1 - Cross-Site Request Forgery
Theater for WordPress <= 0.18.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.