Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersRelated Posts for WordPress <= 2.0.3 - Reflected Cross-Site Scripting
Social Slider Widget <= 1.8.4 - Reflected Cross-Site Scripting
VM Backups <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
VM Backups <= 1.0 - Cross-Site Request Forgery
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Database Backups <= 1.2.2.6 - Cross-Site Request Forgery
Plus Addons for Elementor Page Builder <= 4.1.6 - Authentication Bypass
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection
BuddyPress <= 7.2.0 - Authorization Bypass to Private Message Disclosure
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.153.3 - Unauthenticated Blind SQL Injection
Paid Memberships Pro <= 2.5.5 - Authenticated SQL Injection
WooCommerce Upload Files <= 59.3 - Arbitrary File Upload
User Profile Picture <= 2.4.0 - Sensitive Information Disclosure
Advanced Order Export For WooCommerce <= 3.1.7 - Reflected Cross-Site Scripting
Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypass
Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass
Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass
Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass
ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass
Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.