Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWpStream <= 4.9.5 - Missing Authorization
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Arcane <= 3.6.6 - Missing Authorization
Visitor Stats Widget <= 1.5.0 - Reflected Cross-Site Scripting
Poptics <= 1.0.20 - Authenticated (Contributor+) Information Exposure
App Bar <= 1.5 - Reflected Cross-Site Scripting
Scroll rss excerpt <= 5.0 - Reflected Cross-Site Scripting
weForms <= 1.6.25 - Missing Authorization
Flaming Password Reset <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting
Fana <= 1.1.35 - Authenticated (Contributor+) Local File Inclusion
Popup box <= 6.0.7 - Cross-Site Request Forgery
Astra Widgets <= 1.2.16 - Authenticated (Editor+) Stored Cross-Site Scripting
Newsletters <= 4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
FlippingBook <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Discussion Board <= 2.5.7 - Missing Authorization
H5P <= 1.16.1 - Missing Authorization
HR Management Lite <= 3.7 - Missing Authorization
Strong Testimonials <= 3.2.20 - Missing Authorization
Theater for WordPress <= 0.19 - Missing Authorization
Web Directory Free <= 1.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization
WC Builder <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.