Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersGS Testimonial Slider <= 3.2.9 - Unauthenticated Arbitrary Shortcode Execution
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.8 - Authenticated (Shop manager+) SQL Injection
Open Close WooCommerce Store <= 4.9.5 - Authenticated (Contributor+) Local File Inclusion
Challan <= 3.7.58 - Cross-Site Request Forgery to Arbitrary Options Update
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Load More <= 7.3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
DoFollow Case by Case <= 3.5.1 - Cross-Site Request Forgery
Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Submission DOM tracking for Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Unauthenticated Server-Side Request Forgery
Soccer Live Scores <= 1.0.5 - Cross-Site Request Forgery
Color Your Bar <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Widget Countdown <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Credova_Financial <= 2.5.0 - Cross-Site Request Forgery
Beacon Lead Magnets and Lead Capture <= 1.5.8 - Cross-Site Request Forgery
Easy PayPal Events <= 1.2.2 - Cross-Site Request Forgery
Seznam Webmaster <= 1.4.7 - Cross-Site Request Forgery
Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
AWEOS WP Lock <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
TrackShip for WooCommerce <= 1.9.1 - Authenticated (Shop manager+) SQL Injection
Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Pipes <= 1.4.3 - Authenticated (Administrator+) Server-Side Request Forgery
WPBakery Visual Composer WHMCS Elements <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.