Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Jobmonster <= 4.8.0 - Unauthenticated Sensitive Information Disclosure
Prisma <= 1.10 - Unauthenticated Local File Inclusion
WP Admin Theme <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Recurring PayPal Donations <= 1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
IDonatePro <= 2.1.11 - Missing Authorization
Fluent Support <= 1.9.1 - Cross-Site Request Forgery
JobWP <= 2.4.3 - Cross-Site Request Forgery
tli.tl auto Twitter poster <= 3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Palatio <= 1.6 - Unauthenticated Local File Inclusion
The Flash <= 1.15 - Unauthenticated Local File Inclusion
Premmerce Brands for WooCommerce <= 1.2.13 - Cross-Site Request Forgery
Pantry <= 1.4 - Unauthenticated Local File Inclusion
jQuery Colorbox <= 4.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Heart <= 1.8 - Unauthenticated Local File Inclusion
WPPizza <= 3.19.8 - Missing Authorization
Tacticool <= 1.0.13 - Unauthenticated Local File Inclusion
Sessions <= 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Statistics for Feeds <= 20250322 - Cross-Site Request Forgery
Jobmonster <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Statify Widget <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 5.0.26 - Missing Authorization
PDF for Elementor Forms + Drag And Drop Template Builder <= 6.5.0 - Authenticated (Subscriber+) PHP Object Injection
WP Fast Total Search <= 1.79.270 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.