Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersPoll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
Javo Core <= 3.0.0.529 - Unauthenticated Arbitrary Content Deletion
Parallax Section block <= 1.0.9 - Missing Authorization
Chartbeat <= 2.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Yahoo! WebPlayer <= 2.0.6 - Reflected Cross-Site Scripting
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
WooCommerce Payment Gateway for Saferpay <= 0.4.9 - Unauthenticated Path Traversal
Uncode < 2.9.4.4 - Reflected Cross-Site Scripting
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation
Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation
Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter
SEO For Images <= 1.0.0 - Cross-Site Request Forgery
PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API
XM-Backup <= 0.9.1 - Cross-Site Request Forgery
Taxi Booking Manager for WooCommerce <= 1.3.0 - Missing Authorization
Invisible Optin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Ticket Customer Service Software & Support Ticket System <= 6.0.2 - Unauthenticated PHP Object Injection
Post Type Converter <= 0.6 - Cross-Site Request Forgery
Table Editor <= 1.6.4 - Cross-Site Request Forgery
UPC/EAN/GTIN Code Generator <= 2.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
bidorbuy Store Integrator <= 2.12.0 - Authenticated (Admin+) Remote Code Execution
Tripadvisor Shortcode <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.