Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersNewspaper < 9.2.2 - Cross-Site Scripting
Accessibility Suite by Online ADA < 2.0.11 - SQL Injection
Superlist - Directory WordPress Theme | Directory & Listings <= 2.9.2 - Stored Cross-Site Scripting
Simple Social Media Share Buttons 2.0.4 - 2.0.21 - Missing Authorization
Forminator Plugin <= 1.5.3.1 - SQL Injection
Forminator Plugin <= 1.5.4 - Cross-Site Scripting
GiveWP <= 2.3.0 - Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.2.7 - Reflected Cross-Site Scripting
WP Live Chat Support <= 8.0.17 - Cross-Site Scripting
WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting
YOP Poll <= 6.0.2 - Reflected Cross-Site Scripting via poll_id Parameter
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
KingComposer <= 2.8 - Reflected Cross-Site Scripting
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
NextGen Gallery <= 3.1.5 - PHP Object Injection
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
Parallax Scroll <= 2.0.1 - Cross-Site Scripting
Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter
Meta Box <= 4.16.1 - Mishandling of File Upload
OneLogin SAML SSO <= 2.8.0 - Distributed Denial-of-Service
Yet Another Stars Rating <= 1.8.6 - Unauthenticated PHP Object Injection
Wise Chat <= 2.6.3 - Reverse Tabnabbing
Health Check & Troubleshooting <= 1.2.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.