Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersMollie for Contact Form 7 <= 5.0.0 - Reflected Cross-Site Scripting
Comfino Payment Gateway <= 4.1.1 - Reflected Cross-Site Scripting
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page'
Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnonce
Zooom <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
If Menu <= 0.19.1 - Missing Authorization to License Key Update
WP Publications <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Blaze Online eParcel for WooCommerce <= 1.3.3 - Reflected Cross-Site Scripting
Library Management System <= 3.1 - Authenticated (Admin+) SQL Injection
Float Block <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication
Import Export For WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
FAQs <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
WP-SVG <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting
TAX SERVICE Electronic HDM <= 1.1.2 - Unauthenticated SQL Injection
코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Notification <= 1.3 - Missing Authorization
Easy Replace <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
DN Shipping by Weight for WooCommerce <= 1.1.1 - Cross-Site Request Forgery to Plugin Settings Update
Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.