Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersWooCommerce Conditional Marketing Mailer <= 1.5.1 - Improper Authorization
Visitor Traffic Real Time Statistics <= 2.11 - Missing Authorization to Arbitrary Plugin Installation/Activation
Captchinoo, admin login page protection with Google recaptcha <= 2.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Conditional Marketing Mailer for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
RSS for Yandex Turbo <= 1.29 - Authenticated Stored Cross-Site Scripting
WooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion
Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions
Kaswara Modern VC Addons <= 3.0.1 - Arbitrary File Upload
Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection
Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation
Ultimate Maps by Supsystic <= 1.2.4 - Reflected Cross-Site scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting <= 1.5.68 - Reflected Cross-Site Scripting
Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting
Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting
404 SEO Redirection <= 1.3 - Cross-Site Request Forgery
All 404 Redirect to Homepage < 1.21 - Reflected Cross-Site Scripting via tab Parameter
404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting
SEO Redirection <= 6.4 - Authenticated Stored Cross-Site Scripting
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.10.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.