Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Build Private Store For Woocommerce <= 1.0 - Missing Authorization
Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Size Charts Plugin for WooCommerce <= 2.4.5 - Missing Authorization
WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File Read
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.10.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Sticky Buttons <= 4.1.1 - Cross-Site Request Forgery to Settings Update
Comment Edit Core – Simple Comment Editing <= 3.0.33 - Authenticated (Admin+) Server-Side Request Forgery
Job Board Manager <= 2.1.59 - Cross-Site Request Forgery
WooCommerce Quick View <= 1.1.1 - Unauthenticated Information Disclosure
Premium Packages <= 5.9.6 - Authenticated (Administrator+) SQL Injection
WC Marketplace <= 4.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Email Subscription Popup <= 1.2.23 - Authenticated (Administrator+) SQL Injection
WP VR <= 8.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Houzez <= 3.4.0 - Missing Authorization
Simple Video Management System <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Side Menu Lite <= 5.3.1 - Cross-Site Request Forgery to Settings Update
Attire Blocks <= 1.9.6 - Cross-Site Request Forgery
PageLayer <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate Coming Soon & Maintenance <= 1.0.9 - Cross-Site Request Forgery
Chained Quiz <= 1.3.2.9 - Authenticated (Admin+) Server-Side Request Forgery
12 Step Meeting List <= 3.16.5 - Unauthenticated Sensitive Information Exposure
WP Go Maps <= 9.0.40 - Cross-Site Request Forgery
Caching Compatible Cookie Opt-In and JavaScript <= 0.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.