Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
Academy LMS <= 3.3.4 - Authenticated (Academy Instructor+) Insecure Direct Object Reference
Ongkoskirim.id <= 1.0.6 - Missing Authorization
Zoho Billing <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Adverts <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Content Mask <= 1.8.5.2 - Authenticated (Contributor+) Server-Side Request Forgery
Helpdesk Support Ticket System for WooCommerce <= 2.1.1 - Missing Authorization
WP Attractive Donations System < 1.29 - Cross-Site Request Forgery
TOCHAT.BE <= 1.3.4 - Cross-Site Request Forgery
Deliver via Shipos for WooCommerce <= 3.0.2 - Cross-Site Request Forgery
Skimlinks Affiliate Marketing Tool <= 1.3 - Missing Authorization
Flexible FAQ <= 0.2 - Cross-Site Request Forgery
Master Slider <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Buckets <= 0.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
SV Proven Expert <= 2.0.06 - Cross-Site Request Forgery
eZee Online Hotel Booking Engine <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Soledad <= 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tapfiliate <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accordion <= 2.3.15 - Missing Authorization
Envíos Coordinadora Woocommerce <= 1.1.31 - Unauthenticated Sensitive Information Exposure
Search Atlas SEO <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Highlight and Share – Social Text and Image Sharing <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Upcoming Events Lists <= 1.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.