Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersRSVPMaker < 5.6.4 - SQL Injection
WP GDPR Compliance <= 1.4.2 - Arbitrary Options Update and Action Calling
Better WordPress reCAPTCHA <= 2.0.3 - Reflected Cross-Site Scripting
Yoast SEO <= 9.1.0 - Race Condition to Remote Code Execution
WooCommerce <= 3.4.5 - WooCommerce File Deletion
Flow-Flow Social Feed Stream <= 3.0.71 - Cross-Site Scripting
Media File Manager <= 1.4.2 - Reflected Cross-Site Scripting
EventCalendar <= 1.1.21 - Cross-Site Scripting
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.4.13 - Arbitrary File Upload
WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting
Elegant Themes (Various Versions) - Stored Cross-Site Scripting
Rockhoist Ratings < 1.2.3 - SQL Injection
Elementor Pro <= 2.0.9 - Cross-Site Scripting
Pie Register < 3.0.18 - Unauthenticated Cross-Site Scripting
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
AMP for WP <= 0.9.97.19 - Missing Authorization
All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
WP Live Chat Support <= 8.0.15 - Cross-Site Scripting
Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload
Support Board for WordPress <= 1.2.3 - Cross-Site Scripting
Tajer <= 1.0.5 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.