Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
IMPress for IDX Broker <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Multilingual & Multicurrency <= 5.3.6 - Missing Authorization
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.6.11 - Reflected Cross-Site Scripting
GDPR Cookie Consent <= 2.6.0 - Cross-Site Request Forgery to Bulk Delete
Greenshift – animation and page builder blocks <= 9.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Team Showcase <= 1.22.25 - Reflected Cross-Site Scripting
PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL Injection
GDPR Cookie Consent <= 2.6.0 - Unauthenticated Stored Cross-Site Scripting
Gutenberg Blocks – Unlimited blocks For Gutenberg <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting
FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution
Path traversal vulnerability in functional web frameworks
Stylish Price List <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Joy Of Text Lite <= 2.3.1 - Cross-Site Request Forgery
WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding
Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions
Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting
Simple Spoiler 1.2 - 1.3 - Unauthenticated Arbitrary Shortcode Execution
Salon Booking System <= 10.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ntz Antispam <= 2.0e - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.