Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
PayPal Express Checkout <= 2.1.2 - Cross-Site Request Forgery
JobSearch WP Job Board <= 2.9.2 - Authentication Bypass via Social Logins
Availability Calendar <= 0.2.4 - Cross-Site Request Forgery
Mini twitter feed <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Related Posts via Taxonomies <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Animate <= 0.5 - Authenticated (Contributor+) Server-Side Request Forgery
The Pack Elementor addons <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Hashtags [#hashtagger] <= 7.2.3 - Missing Authorization
Business Contact Widget <= 2.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WpZon – Amazon Affiliate Plugin <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Send From <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
RAphicon <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Confirm User Registration <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
BBCode Deluxe <= 2020.08.01.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dropdown Content <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LSD Custom taxonomy and category meta <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Flickr Shortcode Importer <= 2.2.3 - Authenticated (Administrator+) PHP Object Injection
WP Customize Login Page <= 1.6.5 - Missing Authorization
Carousel-of-post-images <= 1.07 - Authenticated (Contributor+) Stored Cross-Site Scripting
occupancyplan <= 1.0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Twitter Card Generator <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Vasaio QR Code <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tooltip <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.