Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Next Event Calendar <= 1.2 - Authenticated (Author+) Stored Cross-Site Scripting
Ultimate WP Mail <= 1.3.5 - Missing Authorization
Mediabay - WordPress Media Library Folders <= 1.4 - Reflected Cross-Site Scripting
ACF: Yandex Maps Field <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Featured Content Slider <= 2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sina Extension for Elementor <= 3.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Table Builder <= 2.0.6 - Cross-Site Request Forgery
WP Text Expander <= 1.0.1 - Authenticated (Administrator+) SQL Injection
Behance Portfolio Manager <= 1.7.5 - Missing Authorization
Search with Typesense <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elegant Visitor Counter <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Complete Google Seo Scan <= 3.5.1 - Authenticated (Administrator+) SQL Injection
Melipayamak <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Atelier Create CV <= 1.1.5 - Cross-Site Request Forgery to Settings Update
PDF for WPForms <= 5.5.0 - Missing Authorization
Backwp <= 2.0.2 - Cross-Site Request Forgery
Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordLift <= 3.54.4 - Missing Authorization
WC Vendors Marketplace <= 2.5.6 - Authenticated (Administrator+) SQL Injection
WP Media File Type Manager <= 2.3.0 - Cross-Site Request Forgery to Settings Update
oik <= 4.15.1 - Missing Authorization
Interactive Regional Map of Florida <= 1.0 - Missing Authorization
Newspack Newsletters <= 3.13.0 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.