Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Multiple Themify Themes <= Various Versions - Reflected Cross-Site Scripting
Content Manager Light <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
GDPR Cookie Notice <= 1.2.0 - Missing Authorization
Material Dashboard <= 1.4.5 - Unauthenticated Local File Inclusion
Norse Rune Oracle Plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
OpenAI Tools for WordPress & WooCommerce <= 2.1.5 - Missing Authorization
Fonts Manager | Custom Fonts <= 1.2 - Reflected Cross-Site Scripting
Order Splitter for WooCommerce <= 5.3.0 - Authenticated (Subscriber+) SQL Injection
Cache control by Cacholong <= 5.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ebook Downloader <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Posten <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Post Custom Templates Lite <= 1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bulk NoIndex & NoFollow Toolkit <= 2.16 - Reflected Cross-Site Scripting
Srbtranslatin <= 3.2.0 - Unauthenticated Sensitive Information Exposure
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Unauthenticated Sensitive Information Exposure
WP Profitshare <= 1.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Printus <= 1.2.6 - Missing Authorization
Ultimate Push Notifications <= 1.3.0 - Reflected Cross-Site Scripting
Dima Take Action <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
BuddyPress Members Only <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Question Answer <= 1.2.70 - Missing Authorization
Team Members for Elementor Page Builder <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Icons <= 2.8.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.