Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersTask Manager Pro <= 1.3.1 - Reflected Cross-Site Scripting
WP Live Chat Support <= 7.1.02 - Cross-Site Scripting
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting
DSubscribers < 1.2.1 - Authenticated (Admin+) SQL Injection
FormCraft Basic 1.0.5 - SQL Injection via id Parameter
Add Edit Delete Listing Module <= 1.0 - SQL Injection
TablePress <= 1.8 - XML External Entity Injection
Event Expresso Free <= 3.1.37.11.L - Authenticated SQL Injection
WatuPRO < 5.5.3.7 - SQL Injection
WP Statistics <= 12.0.8.1 - Reflected Cross-Site Scripting
WP Statistics <= 12.0.7 - Authenticated SQL Injection
Custom Sidebars <= 3.0.8 - Cross-Site Request Forgery
Postman SMTP <= 1.7.2 - Reflected Cross-Site Scripting
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection
Display Widgets < 2.7 - SEO Spam Injection (Hidden Functionality)
WordPress Shortcodes Plugin — Shortcodes Ultimate < 4.10.0 - Directory Traversal
Analytics Tracker <= 1.1.0 - Cross-Site Scripting
WP Rocket <= 2.10.3 - Local File Inclusion
Email Before Download <= 3.6 - SQL Injection
Email Before Download <= 3.6 - SMTP Header Injection
All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting
EventCalendar < 1.0.94 - Authenticated Cross-Site Scripting
Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.