Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersMedia File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Relocation
WP User Groups <= 2.1.0 - Cross-Site Request Forgery
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Read
Media File Manager <= 1.4.2 - Directory Traversal to Directory Listing
Ultimate Member < 2.0.4 - Authenticated Unrestricted File Upload
Ultimate Member <= 2.0.39 - Directory Traversal
BBE < 1.53 - Authorization Bypass
Ultimate Member < 2.0.4 - Insecure Direct Object Reference
Google Forms <= 0.93 - Remote Code Execution
Tagregator <= 0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
WF Cookie Consent <= 1.1.3 - Cross-Site Scripting
PixelYourSite <= 5.2.1 - Reflected Cross-Site Scripting
Events Manager <= 5.8.1.3 - Stored Cross-Site Scripting
Form Maker by 10Web <= 1.12.21 - CSV Injection
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps < 4.0.4 - Cross-Site Scripting
Open Graph and Twitter Card Tags < 2.2.4.1 - Reflected Cross-Site Scripting
Responsive Cookie Consent < 1.8 - Cross-Site Scripting
VRView <= 1.1.3 and WP-VR-view <= 1.6 - Reflected Cross-Site Scripting
WD Instagram Feed <= 1.3.0 - Cross-site scripting
Ultimate Member <= 2.0.6 - Multiple Cross-Site Request Forgery Issues
WD Instagram Feed Premium <= 1.3.0 - Cross-Site Scripting
Ultimate Member <= 2.0.10 - Authenticated Cross-Site Scripting
Catapult UK Cookie Consent <= 2.3.9 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.