Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersRemove Footer Credit <= 1.0.10 - Admin+ Stored Cross-Site Scripting
Mitsol Social Post Feed <= 1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks
Ibtana – WordPress Website Builder <= 1.1.4.7 - Missing Authorization to Stored Cross-Site Scripting
Powerkit < 2.5.9 - Cross-Site Request Forgery
AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation
Mortgage Calculators WP < 1.53 - Authenticated Stored Cross-Site Scripting
AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery
Adaptive Images <= 0.6.68 - Reflected Cross-Site Scripting
WP-DownloadManager <= 1.68.6 - Stored Cross-Site Scripting
CLUEVO E-Learning Platform <= 1.8.0 - Authenticated Cross-Site Scripting
Ivory Search <= 5.4 - Multiple Admin+ Stored Cross-Site Scripting
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting
All-in-one Floating Contact Form <= 2.0.3 - Reflected Cross-Site Scripting
SEUR Oficial < 1.7.2 - Authenticated Arbitrary File Download
WooCommerce – Store Exporter <= 2.7 - Reflected Cross-Site Scripting
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request Forgery
RVM - Responsive Vector Maps <= 6.4.1 - Subscriber+ Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.