Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersContact Form 7 Editor Button <= 1.0.0 - Reflected Cross-Site Scripting
Torod <= 1.9 - Unauthenticated SQL Injection
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Authenticated (Subscriber+) SQL Injection
Ultimate Push Notifications <= 1.3.0 - Missing Authorization
Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting
Site Chat on Telegram <= 1.0.4 - Unauthenticated PHP Object Injection
LoginWP - Pro <= 4.0.8.5 - Missing Authorization
ListingEasy <= 1.9.2 - Reflected Cross-Site Scripting
Multi-language Responsive Contact Form <= 2.8 - Missing Authorization
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion
SMu Manual DoFollow <= 1.8.1 - Reflected Cross-Site Scripting
Wordpress Auto Spinner <= 3.25.0 - Reflected Cross-Site Scripting
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting
Tennis Court Bookings <= 1.2.7 - Reflected Cross-Site Scripting
CSS3 Compare Pricing Tables for WordPress <= 11.6 - Reflected Cross-Site Scripting
Easy Video Player Wordpress & WooCommerce <= 10.0 - Unauthenticated Arbitrary File Download
WP Pipes <= 1.4.3 - Unauthenticated Arbitrary File Deletion
UNIVERSAM < 9.08 - Unauthenticated PHP Object Injection
Easy Elements Hider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection
OwnerRez <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Shop Page Builder <= 2.27.7 - Missing Authorization
Gallery Widget <= 1.2.1 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.