Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWP Database Backup <= 5.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Debug Bar ElasticPress <= 2.1.0 - Cross-Site Scripting
Calendar Event Multi View <= 1.4.06 - Missing Authorization to Stored Cross-Site Scripting
Helpful <= 4.5.14 - Authorization Bypass to Repeat Voting
Visual Portfolio, Photo Gallery & Post Grid <= 2.17.1 - Unauthenticated CSS Injection
Visual Portfolio, Photo Gallery & Post Grid <= 2.18.0 - Contributor+ CSS Injection
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion
Fast Flow <= 1.2.11 - Reflected Cross-Site Scripting
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Reflected Cross-Site Scripting
Protect uploads <= 0.3 - Authorization Bypass
Notification Bar for WordPress <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Alpine PhotoTile for Pinterest <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Uploading SVG, WEBP and ICO files <= 1.0.1 - Authenticated Stored Cross-Site Scripting
THE Leads Management System: 59sec LITE <= 3.4.1 - Authorization Bypass
Uploading SVG, WEBP and ICO files <= 1.0.1 - Arbitrary File Upload
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
reSmush.it <= 0.4.3 - Missing Authorization
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
Simple Payment Donations <= 4.2.0 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 3.0.1 - PHP Object Injection
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
Directorist <= 7.3.0 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.