Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersEbook Store <= 5.8009 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Time Countdown for WooCommerce <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Contribuinte Checkout <= 2.0.03 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Blocksy <= 2.0.97 - Missing Authorization
Beds24 Online Booking <= 2.0.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
GPT3 AI Content Writer <= 1.9.14 - Cross-Site Request Forgery
Envo Extra <= 1.9.9 - Missing Authorization
WP Gravity Forms Dynamics CRM <= 1.1.4 - Open Redirect
Ovation Elements <= 1.1.2 - Missing Authorization
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure
WP DPE-GES <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Display Remote Posts Block <= 1.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Listamester <= 2.3.6 - Cross-Site Request Forgery
ELI's Related Posts Footer Links and Widget <= 1.2.04.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Show All Comments <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
ContentStudio <= 1.3.5 - Missing Authorization
theMarketer <= 1.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
GS Testimonial Slider <= 3.3.0 - Missing Authorization
Display Eventbrite Events <= 6.2.6 - Authenticated (Contributor+) Local File Inclusion
JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
PublishPress Authors <= 4.7.5 - Authenticated (Contributor+) Local File Inclusion
WP Hotel Booking <= 2.1.9 - Cross-Site Request Forgery
WPAdverts <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.