Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Speed Optimizer <= 7.4.6 - Missing Authorization via purge_on_other_events()
Simple Registration for WooCommerce <= 1.5.6 - Unauthenticated Privilege Escalation
Elements Plus! <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Testimonials Showcase <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
PeproDev Ultimate Invoice <= 2.0.0 - Missing Authorization
Flash Video Player <= 5.0.4 - Cross-Site Request Forgery
Easy Textillate <= 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting
Envo Extra <= 1.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Code Insert Manager (Q2W3 Inc Manager) <= 2.5.3 - Reflected Cross-Site Scripting
GG Woo Feed for WooCommerce Shopping Feed <= 1.2.6 - Missing Authorization
WP Cost Estimation & Payment Forms Builder <= 10.1.76 - Missing Authorization
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'
Zero Spam <= 5.5.6 - Spam Protection Bypass
Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting
Canva – Design beautiful blog graphics <= 1.2.4 - Reflected Cross-Site Scripting
Easy CountDowner <= 1.0.8 - Cross-Site Request Forgery
WooCommerce Google Feed Manager <= 2.4.2 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode
Fixed HTML Toolbar <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Related Posts for WordPress <= 4.0.3 - Cross-Site Request Forgery
WP-Cufon <= 1.6.10 - Unauthenticated Stored Cross-Site Scripting
Mega Addons For Elementor <= 1.8 - Missing Authorization
Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.