Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersPage Generator <= 1.7.1 - Authenticated(Administrator+) SQL Injection
404 Solution <= 2.33.0 - Sensitive Information Exposure via Log File
Send Users Email <= 1.4.3 - Sensitive Information Exposure via Error Logs
WP Adminify <= 3.1.6 - Authenticated(Administrator+) SQL Injection
Uncanny Automator <= 5.1.0.2 - Sensitive Information Exposure via Log File
WP Stripe Checkout <= 1.2.2.37 - Sensitive Information Exposure via Debug Log
WebinarIgnition <= 3.05.0 - Unauthenticated SQL Injection
Checkout Mestres WP <= 7.1.9.6 - Unauthenticated SQL Injection
FastDup <= 2.1.7 - Sensitive Information Exposure via Log File
eCommerce Product Catalog <= 3.3.26 - Sensitive Information Exposure via CSV Files
Defender Security <= 4.1.0 - Sensitive Information Exposure via Log File
Fluent Support <= 1.7.6 - Authenticated(Administrator+) SQL Injection
Product Catalog Simple <= 1.7.6 - Sensitive Information Exposure via Product CSV
Database Cleaner <= 0.9.8 - Sensitive Information Exposure via Log File
WP Optin Wheel <= 1.4.2 - Sensitive Information Exposure via Log File
Conversios.io <= 6.5.0 - Missing Authorization
BookingPress <= 1.0.72 - Authenticated (Contributor+) SQL Injection
BookIt <= 2.4.3 - Authenticated(Administrator+) SQL Injection
Advanced Form Integration <= 1.75.0 - Authenticated(Administrator+) SQL Injection
Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection
GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection
Welcart e-Commerce <= 2.9.3 - Authenticated(Editor+) SQL Injection
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.