Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
CultBooking Hotel Booking Engine <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ArCa Payment Gateway <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Administrator+) SQL Injection
Smart Marketing SMS and Newsletters Forms <= 5.0.4 - Missing Authorization
Yahoo! WebPlayer <= 2.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Simple Header and Footer <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mins To Read <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Best Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Image Gallery Plugin <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Button Plus <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
SpatialMatch IDX <= 3.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mail Picker <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Capitalize My Title <= 0.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Mermaid <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stripe Donation <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Essential Breadcrumbs <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Pixobe Cartography <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
DancePress (TRWA) <= 3.1.11 - Cross-Site Request Forgery
Sparkle Elementor Kit <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Random Banner <= 4.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Chatter <= 1.0.1 - Missing Authorization
WP MathJax <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Video Store <= 21.07 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.