Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Video & Photo Gallery for Ultimate Member <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
J&T Express Malaysia <= 2.0.13 - Reflected Cross-Site Scripting via [placeholder]
Integrate Firebase <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Media Shortcodes <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Downloader <= 0.4.7.4 - Reflected Cross-Site Scripting
WP GeoNames <= 1.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting
Planaday API <= 11.4 - Reflected Cross-Site Scripting
GEO my WordPress <= 4.5.0.4 - Missing Authorization via get_field_options_ajax
Staggs Product Configurator for WooCommerce <= 2.0.0 - Reflected Cross-Site Scripting
Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
Vimeography <= 2.4.4 - Sensitive Information Exposure
FloristPress <= 7.2.0 - Reflected Cross-Site Scripting
AutoWP <= 2.0.8 - Cross-Site Request Forgery
Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation
Notibar <= 2.1.4 - Missing Authorization via ajax_install_plugin
ForumWP <= 2.1.0 - Unauthenticated PHP Object Injection
News Ticker for Elementor <= 2.1.3 - Missing Authorization
Persian Woocommerce SMS <= 7.0.5 - Reflected Cross-Site Scripting
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
FormFacade <= 1.3.6 - Reflected Cross-Site Scripting
Radius Blocks – WordPress Gutenberg Blocks <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.