Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersRobo Gallery <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WPSpeed <= 2.6.5 - Cross-Site Request Forgery
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Ultimate Blocks <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Recall <= 16.26.14 - Authenticated (Contributor+) Local File Inclusion
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 5.3.8 - Authenticated (Administrator+) SQL Injection
Productive Commerce <= 1.1.22 - Unauthenticated SQL Injection
Calculate Prices based on Distance For WooCommerce <= 1.3.5 - Missing Authorization
EasyMe Connect <= 3.0.3 - Cross-Site Request Forgery
TrueBooker <= 1.0.7 - Cross-Site Request Forgery
Poll Maker <= 5.7.7 - Unauthenticated Race Condition to Multi-Vote
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Server-Side Request Forgery
Graphina <= 3.0.4 - Missing Authorization
YaySMTP <= 2.6.4 - Authenticated (Administrator+) SQL Injection
QS Dark Mode <= 3.0 - Missing Authorization
Integration for WooCommerce and Salesforce <= 1.7.5 - Open Redirect
aBlocks <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Progress Bar <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Spiraclethemes Site Library <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cost Calculator for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
SendPulse Email Marketing Newsletter <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Discord Invite <= 2.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
CSV Mass Importer <= 1.2 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.