Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersCombo Offers WooCommerce <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPCal.io <= 0.9.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-Site Scripting
MAS Videos <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion
Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Missing Authorization
iRecco Core <= 1.3.6 - Unauthenticated Local File Inclusion
Civic Cookie Control <= 1.53 - Missing Authorization
SearchAzon <= 1.4 - Cross-Site Request Forgery
e-shops <= 1.0.4 - Reflected Cross-Site Scripting
Töbel <= 1.6 - Unauthenticated Local File Inclusion
Pinpoll <= 4.0.0 - Reflected Cross-Site Scripting
JetBlog <= 2.4.7 - Missing Authorization
Carousel Horizontal Posts Content Slider <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rashy <= 1.1.3 - Unauthenticated Local File Inclusion
JetTabs <= 2.2.12 - Missing Authorization
Team Showcase <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Movies Bulk Importer <= 1.0 - Cross-Site Request Forgery
Appointify <= 1.0.8 - Authenticated (Administrator+) SQL Injection
Vango <= 1.3.3 - Unauthenticated Local File Inclusion
Yada Wiki <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
AweBooking <= 3.2.26 - Authenticated (Subscriber+) Information Exposure
Simple XML Sitemap <= 1.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.