Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Simple Price Calculator <= 1.3 - Missing Authorization
金数据 <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Authors List <= 2.0.6.1 - Cross-Site Request Forgery
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
SEO Auto Linker <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ninja Charts <= 3.3.5 - Unauthenticated Information Exposure
Enable Latex <= 1.2.16 - Cross-Site Request Forgery
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion
Militarology <= 1.0.15 - Unauthenticated Local File Inclusion
Master Paper Collapse Toggle <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Notification for Telegram <= 3.5.1 - Cross-Site Request Forgery
Custom Team Manager <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WN Flipbox Pro <= 2.1 - Cross-Site Request Forgery
Gutentor <= 3.5.5 - Missing Authorization
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.44 - Authenticated (Subscriber+) SQL Injection
Easy Download Media Counter <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
코드엠샵 소셜톡 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Email Template <= 2.8.6 - Cross-Site Request Forgery
Monyxi <= 1.1.8 - Unauthenticated Local File Inclusion
License Manager for WooCommerce <= 3.0.12 - Authenticated (Administrator+) SQL Injection
Pushe Web Push Notification <= 0.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.