Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersTranslate WordPress with GTranslate <= 2.9.8 & Translate WordPress – Google Language Translator <= 6.0.13 - Missing Authorization to Sensitive Information Disclosure
Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Authenticated (Admin+) SQL Injection
Wow Countdowns <= 3.1.2 - Authenticated (Admin+) SQL Injection
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.6.2 - Unauthenticated Stored Cross-Site Scripting
Plezi < 1.0.3 - Unauthenticated Stored Cross-Site Scripting
SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQL Injection
Church Admin <= 3.4.134 - Cross-Site Request Forgery leading to Plugin Backup Disclosure
Popup Builder <= 4.1.0 - SQL Injection
Akismet Privacy Policies <= 2.0.1 - Reflected Cross-Site Scripting
Popup Like box <= 3.6.0 - Reflected Cross-Site Scripting
Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting
Menu Image, Icons made easy <= 3.0.7 - Authenticated Cross-Site Scripting
Interactive Medical Drawing of Human Body < 2.4 - Admin+ Stored Cross-Site Scripting
Title Experiments Free <= 9.0.0 - SQL Injection
Conference Scheduler <= 2.4.3 - Reflected Cross-Site Scripting
Freemius SDK <= 2.4.2 - Missing Authorization Checks
MC4WP: Mailchimp for WordPress <= 4.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
WooCommerce Affiliate Plugin - Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Limit Login Attempts (Spam Protection) <= 4.9.1 - Unauthenticated SQL Injection
Narnoo Distributor <= 2.5.1 - Path Traversal
String Locator <= 2.4.2 - Authenticated Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.