Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersMultiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Countdown Block <= 1.1.1 - Missing Authorization
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Woffice CRM <= 4.0.1 - Authorization Bypass
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
PostX Gutenberg Blocks Saved Templates Addon <= 2.4.9 - Private Content Disclosure
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Nested Pages <= 3.1.15 - Cross-Site Request Forgery to Arbitrary Post Deletion and Modification
TS Poll – Best Poll Plugin for WordPress <= 1.5.8 - Reflected Cross-Site Scripting
WordPress Real Media Library <= 4.14.1 - Authenticated (Author) Stored Cross-Site Scripting
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map <= 1.2.2 - Stored Cross-Site Scripting
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 6.61 - Reflected Cross-Site Scripting
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 6.6.7 - Reflected Cross-Site Scripting
Nested Pages <= 3.1.15 - Open Redirect
PHPRelativePath Library - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
MX Time Zone Clocks <= 3.4 - Contributor+ Cross-Site Scripting
Booster for WooCommerce <= 5.4.3 - Authentication Bypass
Recipe Card Blocks by WPZOOM <= 2.8.0 - Reflected Cross-Site Scripting
SMTP Mail <= 1.2.1 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.