Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersEmail Inquiry & Cart Options for WooCommerce <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Automatic Featured Images from Videos <= 1.2.7 - Missing Authorization
SiteLock Security <= 5.0.2 - Missing Authorization
Share This Image <= 2.09 - Missing Authorization
Bannerize Pro <= 1.11.0 - Missing Authorization
Prowess <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Custom Admin Interface <= 7.41 - Missing Authorization
TOP Table Of Contents <= 1.3.31 - Missing Authorization
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.14 - Missing Authorization
Hustle <= 7.8.9.2 - Unauthenticated Information Exposure
Omnipress <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booter <= 1.5.7 - Missing Authorization
Webpushr <= 4.38.0 - Unauthenticated Information Exposure
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification
Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cross-Site Scripting via options
Omnipress <= 1.6.7 - Authenticated (Contributor+) Local File Inclusion
Protección de datos – RGPD <= 0.68 - Missing Authorization
Download After Email <= 2.1.9 - Missing Authorization
Term Order <= 2.1.0 - Cross-Site Request Forgery
Job Portal <= 2.4.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Latest Post Shortcode <= 14.2.0 - Missing Authorization
Integrate Google Drive <= 1.5.6 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.