Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersContent Fetcher <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gmail SMTP <= 1.0.7 - Cross-Site Request Forgery
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion
BM Content Builder < 3.16.3.3 - Authenticated (Contributor+) Arbitrary File Download
Calendar.online / Kalender.digital <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion
Export Categories & Taxonomies <= 1.0.3 - Missing Authorization
Direct Payments WP <= 1.3.0 - Missing Authorization
Maximum Products per User for WooCommerce <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Add Featured Image Custom Link <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
Infility Global <= 2.15.36 - Unauthenticated SQL Injection
Questionar for Elementor <= 1.1.7 - Missing Authorization
Responsive Block Control <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Indoor Plants <= 1.2.7 - Unauthenticated Local File Inclusion
Easy Upload Files During Checkout <= 3.0.0 - Missing Authorization
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Missing Authorization
User Specific Content <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Gallery <= 2.7.7.26 - Reflected Cross-Site Scripting
Audiomack <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Zoho ZeptoMail <= 3.3.1 - Cross-Site Request Forgery
Web and WooCommerce Addons for WPBakery Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
SensitiveTagCloud <= 1.4.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.