Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Qyrr – simply and modern QR-Code creation <= 2.0.7 - Authenticated (Contributor+) Arbitrary File Upload
My AskAI <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Chat by Chatwee <= 2.1.3 - Cross-Site Request Forgery to Settings Update
Big Post Shipping for WooCommerce <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart WeTransfer <= 1.3 - Missing Authorization
Upload.am File Hosting VPN <= 1.0.0 - Authenticated (Contributor+) Arbitrary Options Disclosure
Custom Post Type Attachment <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ivory Search <= 5.5.12 - Missing Authorization
Image&Video FullScreen Background <= 1.6.7 - Authenticated (Contributor+) SQL Injection
LBG Zoominoutslider <= 5.4.4 - Authenticated (Contributor+) SQL Injection
Greenify <= 2.2 - Unauthenticated Local File Inclusion
Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion
Referral Link Tracker <= 1.1.4 - Missing Authorization
User Avatar - Reloaded <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Geo <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
algoliasearch-helper is vulnerable to Prototype Pollution in _merge()
BuddyPress <= 14.3.4 - Missing Authorization
Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
WP Popup Builder <= 1.3.8 - Unauthenticated Information Exposure
Popular Posts by Webline <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Links shortcode <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.