Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Catch Base <= 3.4.6 - Authenticated (Author+) Stored Cross-Site Scripting
Fluent Support <= 1.8.0 - Authenticated (Subscriber+) SQL Injection
Use Any Font <= 6.3.08 - Cross-Site Request Forgery
Cities Shipping Zones for WooCommerce <= 1.2.7 - Authenticated (Shop Manager+) Local File Inclusion
Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File Upload
ARI Fancy Lightbox <= 1.3.17 - Authenticated (Author+) Stored Cross-Site Scripting
Sunshine Photo Cart <= 3.2.8 - Missing Authorization
ElementsReady Addons for Elementor <= 6.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Secure Copy Content Protection and Content Locking <= 4.2.3 - Reflected Cross-Site Scripting
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
GiveWP <= 3.15.1 - Cross-Site Request Forgery
GEO my WordPress <= 4.5.0.3 - Reflected Cross-Site Scripting
PWA for WP & AMP <= 1.7.72 - Missing Authorization
WS Form LITE <= 1.9.238 - Unauthenticated Stored Cross-Site Scripting
Store Hours for WooCommerce <= 4.3.20 - Reflected Cross-Site Scripting
Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Move Addons for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Templately <= 3.1.2 - Missing Authorization
Share This Image <= 2.01 - Reflected Cross-Site Scripting
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads <= 2.0.84 - Missing Authorization
Download Monitor <= 5.0.9 - Missing Authorization to Authenticated (Subscriber+) Shop Enable
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.