Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filtersAutomation By Autonami <= 3.6.0 - Open Redirect
WPCRM - CRM for Contact form CF7 & WooCommerce <= 3.2.0 - Unauthenticated SQL Injection
Woocommerce Partial Shipment <= 3.2 - Authenticated (Subscriber+) SQL Injection
Sapa <= 1.1.14 - Unauthenticated Local File Inclusion
Simen <= 4.6 - Unauthenticated Local File Inclusion
Nika <= 1.2.8 - Unauthenticated Local File Inclusion
Zota <= 1.3.8 - Unauthenticated Local File Inclusion
Diza <= 1.3.8 - Unauthenticated Local File Inclusion
Besa <= 2.3.8 - Unauthenticated Local File Inclusion
Hara <= 1.2.10 - Unauthenticated Local File Inclusion
Flozen < 1.5.1 - Unauthenticated Arbitrary File Upload
Lasa <= 1.1 - Unauthenticated Local File Inclusion
Aora <= 1.3.9 - Unauthenticated Local File Inclusion
DSK < 2.4 - Unauthenticated Local File Inclusion
Evon <= 3.4 - Unauthenticated Local File Inclusion
WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
WooCommerce Designer Pro <= 1.9.24 - Unauthenticated Arbitrary File Upload
Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload
BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
TicketBAI Facturas para WooCommerce <= 3.19 - Unauthenticated SQL Injection
Nitan <= 2.9 - Unauthenticated Local File Inclusion
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
SNS Anton <= 4.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.