Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation
Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution
Mambo Importer <= 1.0 - Authenticated (Administrator+) PHP Object Injection
Show Me The Cookies <= 1.0 - Unauthenticated Arbitrary Shortcode Execution
SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
Saoshyant Slider <= 3.0 - Unauthenticated PHP Object Injection
List Urls <= 0.2 - Reflected Cross-Site Scripting
Easy Form by AYS <= 2.6.9 - Reflected Cross-Site Scripting
Fontsampler <= 0.4.14 - Reflected Cross-Site Scripting
WordPress Photo Gallery – Image Gallery <= 2.0.4 - Reflected Cross-Site Scripting
Live css <= 1.3 - Unauthenticated Stored Cross-Site Scripting
QR Code for WooCommerce <= 1.2.0 - Reflected Cross-Site Scripting
Better Customer List for WooCommerce <= 1.2.3 - Reflected Cross-Site Scripting
Kush Micro News <= 1.6.7 - Unauthenticated Stored Cross-Site Scripting
CHATLIVE <= 2.0.1 - Unauthenticated SQL Injection
flickr-slideshow-wrapper <= 5.4.6 - Reflected Cross-Site Scripting
GPX Viewer <= 2.2.11 - Authenticated (Editor+) Path Traversal
Flagged Content <= 1.0.2 - Reflected Cross-Site Scripting
User List <= 1.5.1 - Reflected Cross-Site Scripting
Booking Ultra Pro <= 1.1.19 - Reflected Cross-Site Scripting
AcuGIS Leaflet Maps <= 5.1.1.0 - Unauthenticated Stored Cross-Site Scripting
17TRACK for WooCommerce <= 1.2.10 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.