Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWCFM Marketplace <= 3.7.3 - Missing Authorization
WCFM – Frontend Manager for WooCommerce <= 6.7.24 - Missing Authorization
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter
WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP
Admin and Site Enhancements (ASE) <= 8.0.8 - Missing Authorization
UsersWP <= 1.2.48 - Cross-Site Request Forgery
Yaad Sarig Payment Gateway For WC <= 2.2.12 - Missing Authorization
Photo Block <= 1.5.1 - Missing Authorization
Semrush Content Toolkit <= 1.1.32 - Cross-Site Request Forgery
Business Directory <= 6.4.19 - Missing Authorization
Pixel Manager for WooCommerce <= 1.51.1 - Unauthenticated Information Exposure
FAPI Member <= 2.2.29 - Unauthenticated Insecure Direct Object Reference
Ninja Tables <= 5.2.3 - Authenticated (Administrator+) SQL Injection
Document Library Lite <= 1.1.7 - Unauthenticated Insecure Direct Object Reference
Webba Booking <= 6.2.1 - Missing Authorization
CWW Companion <= 1.3.2 - Cross-Site Request Forgery
Sailing < 4.4.6 - Missing Authorization
Easy Invoice <= 2.1.4 - Authenticated (Administrator+) Local File Inclusion
Request a Quote <= 2.5.3 - Missing Authorization
Visitor Statistics (Real Time Traffic) <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.7 - Missing Authorization
Team <= 5.0.10 - Unauthenticated SQL Injection
My Calendar <= 3.6.16 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.