Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWooCommerce <= 3.4.4 - Authenticated PHP Object Injection
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.3.13 - Cross-Site Scripting
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) < 4.1.8 - SQL Injection
Ajax BootModal Login <= 1.4.3 - CAPTCHA Reuse
Plainview Activity Monitor < 20180826 - Remote Command Injection
Import Export WordPress Users and WooCommerce Customers <= 1.3.1 - CSV Injection
Supreme Directory < 1.1.9 - Cross-Site Scripting
Ninja Forms Contact Form <= 3.3.13 - CSV Injection
Chained Quiz <= 1.0.8.2 - Unauthenticated SQL Injection
WordPress Core < 4.9 - Insecure Deserialization
Export Users to CSV <= 1.1.1 - CSV Injection
Ultimate Member <= 2.0.21 - Cross-Site Scripting
Ultimate Member <= 2.0.21 - Arbitrary File Upload
Gwolle Guestbook <= 2.5.3 - Cross-Site Scripting
Booster for WooCommerce <= 3.7.0 - Cross-Site Scripting
Multi Step Form <= 1.2.5 - Stored Cross-Site Scripting
Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting
Snazzy Maps <= 1.1.4 - Multiple Cross-Site Scripting
Multi Step Form <= 1.2.5 - Reflected Cross-Site Scripting
Events Manager <= 5.9.4 - Cross-Site Scripting
AnyComment <= 0.0.32 - Cross-Site Scripting
Geo Mashup - < 1.10.4 - Cross-Site Scripting
Redirection <= 2.7.3 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.