Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersCountdown & Clock <= 2.8.8 - Authenticated (Contributor+) Remote Code Execution
ContentBot AI Writer <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Optin Wheel <= 1.4.7 - Authenticated (Admin+) Server-Side Request Forgery
News & Blog Designer Pack <= 4.0 - Unauthenticated Local File Inclusion
AI Search Bar <= 2.1 - Unauthenticated Stored Cross-Site Scripting
Material Dashboard <= 1.4.5 - Unauthenticated Local File Inclusion
OpenAI Tools for WordPress & WooCommerce <= 2.1.5 - Missing Authorization
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Unauthenticated Sensitive Information Exposure
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
PostmarkApp Email Integrator <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Send E-mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Related Posts Widget with Thumbnails <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Safe Ai Malware Protection for WP <= 1.0.20 - Missing Authorization
wordpress related Posts with thumbnails <= 3.0.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CBX Poll <= 1.2.7 - Unauthenticated PHP Object Injection
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.2.7 - Authenticated (Subscriber+) SQL Injection
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
PostmarkApp Email Integrator <= 2.4 - Missing Authorization
Alloggio - Hotel Booking <= 1.8 - Unauthenticated Local File Inclusion
InstaWP Connect <= 0.1.0.82 - Unauthenticated Local File Inclusion
JetWooBuilder <= 2.1.18 - Authenticated (Contributor+) Local File Inclusion
Houzez Property Feed <= 2.5.4 - Unauthenticated Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.