Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAll In One Redirection <= 2.1.0 - Authenticated(Administrator+) SQL Injection
WooCommerce Bulk Stock Management <= 2.2.33 - Cross-Site Scripting
tagDiv Cloud Library < 2.7 - Missing Authorization to Arbitrary User Metadata Update
Form Builder <= 1.9.9.0 - Cross-Site Request Forgery
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
WooCommerce Payments <= 5.9.0 - Missing Authorization via redirect_pay_for_order_to_update_payment_method
EventON <= 2.1 - Insecure Direct Object Reference to Unauthorized Post Access
WooCommerce Product Vendors <= 2.1.78 - Authenticated (Shop manager+) SQL Injection
Export All URLs <= 4.5 - Reflected Cross-Site Scripting
WooCommerce Square <= 3.8.1 - Missing Authorization via multiple AJAX actions
Galleria <= 1.0.3 - Cross-Site Request Forgery via showOptionsPage
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
Google Map Shortcode <= 3.1.2 - Reflected Cross-Site Scripting
LWS Cleaner <= 2.3.0 - Cross-Site Request Forgery
Template Debugger <= 3.1.2 - Cross-Site Request Forgery
Who Hit The Page – Hit Counter <= 1.4.14.3 - Reflected Cross-Site Scripting
WP Backup Manager <= 1.13.1 - Reflected Cross-Site Scripting
Seed Fonts 2.3.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
LWS Tools <= 2.4.1 - Cross-Site Request Forgery
Recent Posts Slider <= 1.1 - Cross-Site Request Forgery
Sermon'e <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Contact Form Maker <= 1.13.23 - Authenticated (Administrator+) SQL Injection
Recipe Maker For Your Food Blog from Zip Recipes <= 8.0.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.