Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersFrontend File Manager <= 18.2 - Privilege Escalation
WPFront Notification Bar <= 1.9.2 - Authenticated Stored Cross-Site Scripting
VDZ CallBack Plugin < 1.14.6 - Cross-Site Scripting
Astra Pro Addon <= 3.5.1 - Unauthenticated SQL Injection
Grow Social <= 1.18.2 - Reflected Cross-Site Scripting
Software License Manager < 4.4.6 - Cross-Site Request Forgery
WP Upload Restriction <= 2.2.4 – Authenticated (Subscriber+) Stored Cross-Site Scripting
Marmoset Viewer < 1.9.3 - Reflected Cross-Site Scripting
WordPress Email Template Designer < 3.0.8 - Cross-Site Request Forgery
Currency Switcher <= 1.1.6 - Cross-site request forgery
Vuukle Comments, Reactions, Share Bar, Revenue <= 3.4.31 - Cross-Site Request Forgery Bypass
Travel Light <= 1.0 - Cross-Site Request Forgery
Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass
Popular Brand Icons - Simple Icons <= 2.7.7 - Authenticated Cross-Site Scripting
WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass
Speed Booster Pack PageSpeed Optimization Suite <= 4.1.9. - Authenticated (Admin+) Remote Code Execution
Request for Quote < 1.3 - Cross-Site Request Forgery
Unlimited Category slider for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
Calendar Event Multi View <= 1.3.99 - Reflected Cross-Site Scripting
Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass
Magic Post Thumbnail <= 3.3.6 - Reflected Cross-Site Scripting
WooCommerce Extra Cost <= 2.6 - Cross-Site Request Forgery
TNIT Filter Gallery Plugin <= 0.0.6 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.