Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
WP Review Slider <= 12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Login as User or Customer (User Switching) <= 3.8 - Authentication Bypass
Rencontre – Dating Site <= 3.10.1 - Unauthenticated Arbitrary File Upload
Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery
Branda <= 3.4.14 - IP Address Spoofing
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization
Product Catalog Simple <= 1.7.6 - Sensitive Information Exposure via Product CSV
MC4WP <= 4.9.9 - Missing Authorization via listen
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery
Thrive Automator <= 1.17 - Cross-Site Request Forgery
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery
RegistrationMagic <= 5.2.5.0 - IP Spoofing
TerraClassifieds <= 2.0.3 - Cross-Site Request Forgery
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Duplicator <= 1.5.7 - Cross-Site Request Forgery via views/tools/diagnostics/information.php
Database Cleaner <= 0.9.8 - Sensitive Information Exposure via Log File
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure
Simple Staff List <= 2.2.4 - Missing Authorization via ajax_flush_rewrite_rules and staff_member_export
Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
My Agile Privacy <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vis Shortcode
WP Simple Booking Calendar <= 2.0.8.4 - Cross-Site Request Forgery
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.