Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Wishlist <= 1.0.39 - Reflected Cross-Site Scripting
Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ApplyOnline – Application Form Builder and Manager <= 2.6.7.1 - Missing Authorization
Ad Blocking Detector <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting
Barcode Scanner with Inventory & Order Manager <= 1.6.7 - Authenticated (Admin+) Arbitrary File Upload
Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection
Image Source Control <= 2.29.0 - Reflected Cross-Site Scripting
Flexible PDF Coupons <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ksher <= 1.1.2 - Missing Authorization
MDJM Event Management <= 1.7.5.6 - Reflected Cross-Site Scripting
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization
Smart Manager <= 8.52.0 - Authenticated (Administrator+) SQL Injection
MailChimp Subscribe Forms <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key
Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting
Verge3D <= 4.8.0 - Reflected Cross-Site Scripting
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery
Chamber Dashboard Business Directory <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
My Tickets <= 2.0.9 - Missing Authorization
Taskbuilder <= 3.0.6 - Authenticated (Subscriber+) SQL Injection
Social Pug: Author Box <= 1.0.0 - Reflected Cross-Site Scripting
WP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.