Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersEnvato Sales By Item <= 1.1 - Unauthenticated SQL Injection via AJAX call
Mail Subscribe List <= 2.1.6 - Stored Cross-Site Scripting
OTP Login Woocommerce & Gravity Forms <= 2.0 - Cross-Site Scripting
Image Slider by NextCode <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting
BuddyForms Hook Fields <= 1.3.8 - Cross-Site Scripting
underConstruction <= 1.20 - Authenticated (Admin+) Stored Cross-Site Scripting
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting
Codup Read Only Admin <= 1.1.1.7 - Cross Site Scripting
Dropdown and scrollable Text <= 2.0 - Cross-Site Scripting
Wbcom Designs – BuddyPress Group Reviews <= 2.8.1 - Cross-Site Scripting
Direct Checkout for WooCommerce – Skip Cart with Buy Buttons <= 1.2 - Cross-Site Request Forgery to Settings Update
Easy PayPal Shopping Cart <= 1.1.9 - Cross-Site Request Forgery to Cross-Site Scripting
Subscriptions & Memberships for PayPal <= 1.1.5 - Reflected Cross-Site Scripting
Accept Donations with PayPal <= 1.3 - Reflected Cross-Site Scripting via Page
Easy PayPal Events <= 1.1.6 - Reflected Cross-Site Scripting via Page
WordPress to Freshsales Integration <= 1.3.2.2 - Cross-Site Scripting
Elements For Elementor <= 1.9 - Stored Cross-Site Scripting
WP Statistics <= 13.1.7 - Cross-Site Scripting
Shapely Companion <= 1.2.6 - Unprotected AJAX Action to Content Import
Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.12 - Cross-Site Scripting
Gallery for Social Photo <= 1.0.0.25 - Subscriber+ SQL Injection
Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.