Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersRelated Post <= 2.0.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
Quotes for WooCommerce <= 2.0.1 - Cross-Site Request Forgery
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
Quotes for WooCommerce <= 2.0.1 - Missing Authorization
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
Innovs HR <= 1.0.3.6 - Reflected Cross-Site Scripting
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload
Doofinder for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via tab
rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload
which template file <= 5.0.0 - Unauthenticated Cross-Site Scripting
Parallax Slider Block <= 1.2.5 - Authenticated (Author+) Stored Cross-Site Scripting
BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
10to8 Online Appointment Booking System <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Site Offline <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Pocket URLs <= 1.0.2 - Reflected Cross-Site Scripting
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.