Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersForm Maker by 10Web <= 1.13.35 - SQL Injection
MailerLite Signup Forms < 1.4.4 - Unauthenticated SQL Injection
ThirstyAffiliates Affiliate Link Manager <= 3.9.2 - Stored Cross-Site Scripting
Duplicate Page Plugins <= (Various Versions) - SQL Injection
All Import Pro Plugin < 4.1.2 - SQL injection
Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
Marketo Forms and Tracking <= 1.0.2 - Cross-Site Request Forgery
WooCommerce Conversion Tracking <= 2.0.4 - Cross-Site Request Forgery and Cross-Site Scripting
WP Intercom Slack <= 1.2.1 - Sensitive Information Disclosure
YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change
Groundhogg <= 1.3.11.13 - SQL Injection
Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table <= 1.3.8 - Authenticated (Admin+) SQL Injection
Event Espresso Free/Lite <= 3.1.37.12.L - Unauthenticated SQL Injection
Easy!Appointments <= 1.3.2 - Information Disclosure
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Selio - Real Estate Directory <= 1.1 - SQL Injection
HandL UTM Grabber / Tracker <= 2.6.4 - Cross-Site Request Forgery
Viral Quiz Maker - OnionBuzz < 1.2.2 - SQL Injection
OnionBuzz Plugin < 1.2.7 - SQL Injection
Rencontre – Dating Site <= 3.1.2 - SQL Injection
Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments < 3.1.2 - SQL Injection
Author Chat <= 1.9.0 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.