Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Create with Code <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
LearnPress <= 4.2.7.1 - Authenticated (Subscriber+) Open Redirect
Button Generator – easily Button Builder <= 3.1.1 - Cross-Site Request Forgery
Really Simple SSL <= 9.1.4 - Cross-Site Request Forgery
Post Duplicator <= 2.35 - Missing Authorization
WP Fast Total Search <= 1.78.258 - Cross-Site Request Forgery
Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
Linet ERP-Woocommerce Integration <= 3.5.7 - Cross-Site Request Forgery
CoBlocks <= 3.1.13 - Missing Authorization
Orbisius Simple Notice <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Thim Elementor Kit <= 1.2.8 - Missing Authorization
LearnDash LMS <= 4.20.0.1 - Missing Authorization
SERPed.net <= 4.4 - Authenticated (Contributor+) SQL Injection
Call Now Button <= 1.4.13 - Cross-Site Request Forgery
Gutenberg Blocks by Kadence Blocks <= 3.3.1 - Missing Authorization
Download IP2Location Country Blocker <= 2.38.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Popup Box <= 3.2.4 - Cross-Site Request Forgery
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery
WooCommerce Product Table Lite <= 3.8.7 - Missing Authorization
Magic the Gathering Card Tooltips <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Plethora Plugins Tabs + Accordions <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Markers
Internal Links Manager <= 2.5.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.