Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Fyrebox Quizzes <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Front User Submit / Front Editor <= 4.9.4 - Cross-Site Request Forgery
WP Visitor Statistics (Real Time Traffic) <= 8.4 - Missing Authorization
Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload
User Roles and Capabilities <= 1.2.6 - Missing Authorization
Virtual Moderator <= 1.4 - Cross-Site Request Forgery
Hello FSE Blog <= 1.0.6 - Missing Authorization
Code Engine <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Logo Manager For Samandehi <= 0.5 - Cross-Site Request Forgery
File Manager Pro <= 1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP-FB-AutoConnect <= 4.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
XML Travel Portal Widget <= 2.0 - Cross-Site Request Forgery
RDFa Breadcrumb <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Creative Contact Form <= 1.0.0 - Cross-Site Request Forgery
Real Estate Manager <= 7.3 - Cross-Site Request Forgery
Oganro Travel Portal Search Widget for HotelBeds APITUDE API <= 1.0 - Cross-Site Request Forgery
Video List Manager <= 1.7 - Authenticated (Contributor+) SQL Injection
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery
Change Cart button Colors WooCommerce <= 1.0 - Cross-Site Request Forgery
AutomatorWP <= 5.2.4 - Authenticated (Administrator+) SQL Injection
Jobs for WordPress <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter
Taylored webhook validation vulnerabilities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.