Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersARForms Form Builder <= 1.6.7 - Reflected Cross-Site Scripting
Point <= 1.1 - Cross-Site Request Forgery
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Web Directory Free <= 1.7.1 - Reflected Cross-Site Scripting
SociallyViral <= 1.0.10 - Cross-Site Request Forgery
Gum Elementor Addon <= 1.3.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
User Activity Log Pro <= 2.3.4 - Missing Authorization
Seraphinite Accelerator Premium <= 2.21.13 - Cross-Site Request Forgery to Arbitrary File Deletion
SmartMag < 10.1.0 - Unauthenticated Sensitive Information Exposure via Log Files
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery
BuddyBoss Theme <= 2.4.61 - Cross-Site Request Forgery
Simple Post Notes <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Premium Addons for Elementor <= 4.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Business Card <= 1.0.0 - Authenticated (Admin+) Arbitrary File Uplaod
Zephyr Project Manager <= 3.3.97 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Accessibility Helper (WAH) <= 0.6.2.9 - Missing Authorization
Responsive Tabs <= 4.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Donation Block For PayPal <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting
SportsPress – Sports Club & League Manager <= 2.7.21 - Authenticated (Admin+) Stored Cross-Site Scripting
Chained Quiz <= 1.3.2.8 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.