Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersUsersWP <= 1.2.48 - Cross-Site Request Forgery
Yaad Sarig Payment Gateway For WC <= 2.2.12 - Missing Authorization
Photo Block <= 1.5.1 - Missing Authorization
Semrush Content Toolkit <= 1.1.32 - Cross-Site Request Forgery
Business Directory <= 6.4.19 - Missing Authorization
Pixel Manager for WooCommerce <= 1.51.1 - Unauthenticated Information Exposure
FAPI Member <= 2.2.29 - Unauthenticated Insecure Direct Object Reference
Ninja Tables <= 5.2.3 - Authenticated (Administrator+) SQL Injection
Document Library Lite <= 1.1.7 - Unauthenticated Insecure Direct Object Reference
Webba Booking <= 6.2.1 - Missing Authorization
CWW Companion <= 1.3.2 - Cross-Site Request Forgery
Sailing < 4.4.6 - Missing Authorization
Easy Invoice <= 2.1.4 - Authenticated (Administrator+) Local File Inclusion
Request a Quote <= 2.5.3 - Missing Authorization
Visitor Statistics (Real Time Traffic) <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.7 - Missing Authorization
Team <= 5.0.10 - Unauthenticated SQL Injection
My Calendar <= 3.6.16 - Missing Authorization
Simple Link Directory <= 8.8.3 - Cross-Site Request Forgery
Hara <= 1.2.17 - Authenticated (Contributor+) Local File Inclusion
Urna <= 2.5.12 - Authenticated (Contributor+) Local File Inclusion
Lightweight Accordion <= 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sendinblue for WooCommerce <= 4.0.49 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.