Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersPodlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection
Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export
Portugal CTT Tracking for WooCommerce <= 2.1 - Reflected Cross-Site Scripting
SP Project & Document Manager <= 4.69 - Authenticated (Contributor+) SQL Injection via Shortcode
WP Visitor Statistics (Real Time Traffic) <= 6.9.4 - Sensitive Information Exposure via Log File
Post Thumbnail Editor <= 2.4.8 - Sensitive Information Exposure
ThemeIsle SDK <= Various Versions - Missing Authorization
WP STAGING WordPress Backup Plugin < 3.2.0 - Sensitive Information Exposure via cache files
Relevanssi Pro < 2.25 - Unauthenticated Sensitive Information Exposure
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization via wcct_install_happy_addons
HTML5 Video Player <= 2.5.24 - Unauthenticated SQL Injection via id
User Activity Tracking and Log <= 4.1.3 - IP Spoofing
InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information Dislcosure
InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL Injection
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Cryptocurrency Widgets – Price Ticker & Coins List 2.0 - 2.6.5 - Unauthenticated SQL Injection
Smart Manager - WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Albo Pretorio Online <= 4.12.1 - Unauthenticated Sensitive Information Disclosure
IP2Location Country Blocker <= 2.33.3 - Unauthenticated Sensitive Information Exposure via Debug Log File
Delhivery Logistics Courier <= 1.0.107 - Authenticated (Subscriber+) SQL Injection
SalesKing <= 1.6.15 - Unauthenticated Sensitive Information Exposure
Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.