Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Subscriber Deletion
Pretty Google Calendar <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
XStore <= 9.3.8 - Unauthenticated Local File Inclusion
KB Support <= 1.6.0 - Missing Authorization
Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization on Duplicate Post
WooCommerce Amazon Affiliates - Wordpress Plugin < 14.1.00 - Reflected Cross-Site Scripting
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Local File Inclusion
ColorNews <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Header Footer Code Manager Pro <= 1.0.16 - Reflected Cross-Site Scripting via message
Easy Set Favicon <= 1.1 - Reflected Cross-Site Scripting
Piotnet Addons For Elementor <= 2.4.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
The Plus Blocks for Block Editor | Gutenberg <= 3.2.5 - Missing Authorization
MF Gig Calendar <= 1.2.1 - Cross-Site Request Forgery
Annual Archive <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Photo Gallery by 10Web <= 1.8.20 - Missing Authorization
EPROLO Dropshipping <= 1.7.1 - Missing Authorization
WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File
WooCommerce Amazon Affiliates - Wordpress Plugin < 14.1.00 - Missing Authorization
Radio Player <= 2.0.73 - Authenticated (Contributor+) Stored Cross-Site Scripting
XStore Core <= 5.3.8 - Unauthenticated Privilege Escalation
WP Page Post Widget Clone <= 1.0.1 - Missing Authorization
Vitepos <= 3.0.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.