Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersKnews Multilingual Newsletters <= 1.1.0 - Reflected Cross-Site Scripting
Relevanssi <= 3.6.0 - Authenticated (Admin+) SQL Injection
Contact Form 7 to Database Extension 2.10.32 - CSV Injection
WP Live Chat Support <= 8.0.05 - Stored Cross-Site Scripting
WordPress File Upload <= 4.3.3 - Stored Cross-Site Scripting
WP Background Takeover < 4.1.5 - Directory Traversal
My Calendar <= 2.5.16 - Authenticated Stored Cross-Site Scripting
WordPress Core < 4.9.5 - Open Redirect
WordPress Core < 4.9.5 - Authenticated Stored Cross-Site Scripting via Generator Tag
WordPress Core < 4.9.5 - Security Misconfiguration with URL Hostnames
WordPress File Upload <= 4.3.2 - Cross-Site Scripting via Shortcodes
Relevanssi <= 4.0.4 - Cross-Site Scripting
WP Security Audit Log <= 3.1.1 - Sensitive Information Disclosure
Events Manager <= 5.8.1.1 - Cross-Site Scripting
Site Editor <= 1.1.1 - Local File Inclusion
Duplicator <= 1.2.32 - Cross-Site Scripting
MailPoet Newsletters <= 2.8.1 - Spam Injection
Newsletters <= 4.6.8.5 - Object Injection
bbPress Move Topics <= 1.1.4 - Cross-Site Request Forgery
bbPress Move Topics <= 1.1.4 - PHP Object Injection
WP All Import <= 3.4.6 - Cross-Site Scripting
WP All Import <= 3.4.5 - Cross-Site Scripting
Activity Log <= 2.4.0 - Multiple Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.