Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersRecently viewed and most viewed products <= 1.1.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
Solid Central <= 3.0.0 - Stored Cross-Site Scripting via packages
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
BadgeOS <= 3.7.1.6 - Missing Authorization
Direct Checkout – Quick View – Buy Now For WooCommerce <= 1.5.8 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Custom CSS Code
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Actueel Financieel Nieuws – Denk Internet Solutions <= 5.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Ovic Responsive WPBakery <= 1.2.8 - Authenticated (Subscriber+) Arbitrary Option Update
Patreon WordPress <= 1.8.7 - Cross-Site Request Forgery
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Restrict Categories <= 2.6.4 - Reflected Cross-Site Scripting via rc-search
WooCommerce Product Table Lite <= 2.6.2 - Cross-Site Request Forgery
BZScore – Live Score <= 1.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Extra Product Options for WooCommerce <= 4.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
EazyDocs <= 2.3.5 - Unauthenticated Stored Cross-Site Scripting via edit_doc_one_page
ANAC XML Bandi di Gara <= 7.5 - Cross-Site Request Forgery via settings.php
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated Cross-Site Scripting
Edit WooCommerce Templates <= 1.1.1 - Unauthenticated Cross-Site Scripting
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.