Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersPer Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Software License Manager <= 4.4.7 - Reflected Cross-Site Scripting
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.4.3 - Cross-Site Scripting
Daily Prayer Time <= 2021.08.09 - Stored Cross-Site Scripting
Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting
Quiz and Survey Master <= 7.1.13 - SQL Injection
AddToAny Share Buttons <= 1.7.47 - Authenticated Stored Cross-Site Scripting
Book appointment online <= 1.38 - Cross-Site Scripting
Two Factor Authentication (2FA , MFA, OTP SMS and Email) <= 1.0.7 - Cross-Site Scripting
MWB Point of Sale (POS) for WooCommerce <= 1.0.0 - Missing Authorization
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
WordPress Affiliates Plugin — SliceWP Affiliates <= 1.0.45 - Cross-Site Scripting
SpeakOut! Email Petitions <= 2.13.1.1 - Cross-Site Scripting
WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery
Tutor LMS <= 1.9.5 - Cross-Site Scripting
WPFront Notification Bar <= 2.0.0 - Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons <= 1.7.45 - Authenticated Stored Cross-Site Scripting
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
Keyword Meta <= 3.0 - Cross-Site Scripting
Form Builder | Create Responsive Contact Forms <= 1.9.8.4 - Cross-Site Scripting
Site Reviews <= 5.13.0 - Admin+ Stored Cross-Site Scripting
Form Builder <= 1.9.8.3 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.