Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersImport Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass
Free Quotation <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Centangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting
Clubmember <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.3.4 - Missing Authorization to Authenticated (Subscriber+) Post Creation
SH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Pagerank Tools <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Update
EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion
MapMap <= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Reset
Extensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Top Bar Notification <= 1.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Nari Accountant <= 1.0.12 - Authenticated (Editor+) Stored Cross-Site Scripting
MeetingList <= 0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Associados Amazon Plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DominoKit <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update
Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.