Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filterseShipper Commerce <= 2.16.12 - Missing Authorization
My Tickets – Accessible Event Ticketing <= 2.1.0 - Unauthenticated Information Exposure
Sweet Date < 4.0.1 - Unauthenticated PHP Object Injection
WeDesignTech Ultimate Booking Addon <= 1.0.1 - Authenticated (Subscriber+) Authentication Bypass
Eagle Booking <= 1.3.4.3 - Authenticated (Subscriber+) SQL Injection
Really Simple Security Pro <= 9.5.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
The Moneytizer <= 10.0.10 - Missing Authorization
WPC Smart Wishlist for WooCommerce <= 5.0.8 - Missing Authorization
WPC Product Bundles for WooCommerce <= 8.4.5 - Missing Authorization
BSK PDF Manager <= 3.7.2 - Unauthenticated Information Exposure
Forminator <= 1.50.2 - Missing Authorization
Brizy <= 2.7.23 - Missing Authorization
WoodMart <= 8.3.9 - Unauthenticated Sensitive Information Exposure
Directorist <= 8.5.10 - Missing Authorization
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay
Image Slider by Ays <= 2.7.1 - Missing Authorization
Studio99 WP Monitor <= 1.0.3 - Missing Authorization
Toocheke Companion <= 1.194 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrganicFood <= 3.6.4 - Authenticated (Contributor+) Local File Inclusion
Freeio <= 1.3.21 - Authenticated (Contributor+) Local File Inclusion
linkPizza-Manager <= 5.5.5 - Missing Authorization
Diet Calorie Calculator <= 1.1.1 - Missing Authorization
Client Invoicing by Sprout Invoices <= 20.8.9 - Authenticated (Author+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.