Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersUltimate Member <= 2.0.21 - Arbitrary File Upload
Gwolle Guestbook <= 2.5.3 - Cross-Site Scripting
Booster for WooCommerce <= 3.7.0 - Cross-Site Scripting
Multi Step Form <= 1.2.5 - Stored Cross-Site Scripting
Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting
Snazzy Maps <= 1.1.4 - Multiple Cross-Site Scripting
Multi Step Form <= 1.2.5 - Reflected Cross-Site Scripting
Events Manager <= 5.9.4 - Cross-Site Scripting
AnyComment <= 0.0.32 - Cross-Site Scripting
Geo Mashup - < 1.10.4 - Cross-Site Scripting
All In One Favicon <= 4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Ninja Forms <= 3.3.8 - Insufficient Restrictions during Export Personal Data requests
WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion
Ultimate Member <= 2.0.17 - Authenticated Cross-Site Scripting
FV Flowplayer Video Player 6.1.2 - 6.6.4 - Cross-Site Scripting
3CX Live Chat <= 8.0.07 - Cross-Site Scripting
Open Graph and Twitter Card Tags <= 2.2.4.1 - Unauthenticated Cross-Site Scripting
JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery
iThemes Security <= 7.0.2 - Authenticated SQL Injection
WordPress Comments Import & Export <= 2.0.4 - CSV Injection
PublishPress Capabilities <= 1.5.8 - Authenticated SQL Injection
Tooltipy < 5.1 - Cross-Site Request Forgery
Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.