Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHelpdesk Support Ticket System for WooCommerce <= 2.1.1 - Missing Authorization
WP Attractive Donations System < 1.29 - Cross-Site Request Forgery
TOCHAT.BE <= 1.3.4 - Cross-Site Request Forgery
Deliver via Shipos for WooCommerce <= 3.0.2 - Cross-Site Request Forgery
Skimlinks Affiliate Marketing Tool <= 1.3 - Missing Authorization
Flexible FAQ <= 0.2 - Cross-Site Request Forgery
Master Slider <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Buckets <= 0.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
SV Proven Expert <= 2.0.06 - Cross-Site Request Forgery
eZee Online Hotel Booking Engine <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Soledad <= 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tapfiliate <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accordion <= 2.3.15 - Missing Authorization
Envíos Coordinadora Woocommerce <= 1.1.31 - Unauthenticated Sensitive Information Exposure
Search Atlas SEO <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Highlight and Share – Social Text and Image Sharing <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Upcoming Events Lists <= 1.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
WordPress <= 6.8.2 - Authenticated (Author+) Stored Cross-Site Scripting
Mail Baby SMTP <= 2.8 - Cross-Site Request Forgery
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Category Featured Images <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
CF7 Submissions <= 0.26 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.