Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCareerfy - Job Board WordPress Theme <= 3.9.0 - Reflected Cross-Site Scripting
WassUp Real Time Analytics <= 1.9.4.4 - Cross-Site Scripting
Careerfy - Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Careerfy - Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Careerfy - Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Workup – Job Board WordPress Theme <= 2.1.5 - Reflected Cross-Site Scripting
Clean Login <= 1.10.3 - Cross-Site Request Forgery
Nexos - Real Estate WordPress Theme <= 1.7 - SQL Injection
Nexos - Real Estate <= 1.7 - Reflected Cross-Site Scripting
Advanced Forms for ACF <= 1.6.8 - Insecure Direct Object Reference
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme <= 2.9.4 - Reflected Cross-Site Scripting
Coming Soon Page by SeedProd <= 5.1.1 - Authenticated Stored Cross-Site Scripting
Traveler – Travel Booking WordPress Theme < 2.8.4 - Cross-Site Scripting
Travel Booking WordPress Theme < 2.8.4 - SQL Injection
WooCommerce <= 4.2.0 - Reflected Cross-Site Scripting
YITH WooCommerce Ajax Product Filter <= 3.11.0 - Cross-Site Scripting
WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via Cross-Site Request Forgery
Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass
Reality | Estate Multipurpose WordPress Theme <= 2.5.3 - Reflected Cross-Site Scripting
Reality | Estate Multipurpose WordPress Theme <= 2.5.5 - Reflected Cross-Site Scripting
TownHub <= 1.2.9 - Reflected Cross-Site Scripting
Nexos - Real Estate WordPress Theme <= 1.7 - SQL Injection
Nexos - Real Estate WordPress Theme < 1.8 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.