Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
DriCub <= 2.9 - Missing Authorization
Double the Donation <= 2.0.0 - Cross-Site Request Forgery
WPComplete <= 2.9.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LC Wizard <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Gianism <= 6.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
WP User Frontend <= 4.1.12 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Grid <= 2.3.1 - Cross-Site Request Forgery
WP Proposals <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Card Elements for WPBakery <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Last Updated Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Maps for WP <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Genealogical Tree <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CashBill.pl - Płatności WooCommerce <= 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Publitio <= 2.2.1 - Authenticated (Contributor+) Server-Side Request Forgery
Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Better Find and Replace <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mavis HTTPS to HTTP Redirection <= 1.4.3 - Cross-Site Request Forgery
WP Project Manager <= 2.6.25 - Unauthenticated Sensitive Information Exposure
AnyClip Luminous Studio <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Frontend File Manager <= 23.2 - Missing Authorization
Findgo <= 1.3.55 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.