Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersReview Manager <= 2.2.0 - Missing Authorization
Front End Users <= 3.2.32 - Reflected Cross-Site Scripting
Publitio <= 2.1.8 - Missing Authorization
WP Clone any post type <= 3.6 - Open Redirect
Barcode Generator for WooCommerce <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Clearbit Reveal <= 1.0.6 - Cross-Site Request Forgery
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
HMH Footer Builder For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hyperlink Group Block <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Lightweight and Responsive Youtube Embed <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Viral Loops WP Integration <= 3.8.1 - Unauthenticated Sensitive Information Disclosure
ShipDepot for WooCommerce <= 1.2.19 - Missing Authorization
Plugin Oficial – Getnet para WooCommerce <= 1.7.3 - Reflected Cross-Site Scripting
Directorist AddonsKit for Elementor <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Stored Cross-Site Scripting
Free Woocommerce Product Table View <= 1.78 - Missing Authorization
Access Areas <= 1.5.19 - Reflected Cross-Site Scripting
Sheet2Site <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
LeadLab by wiredminds <= 1.3 - Reflected Cross-Site Scripting
WP Proposals <= 2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
VForm <= 3.1.9 - Reflected Cross-Site Scripting
Pearl <= 1.3.9 - Cross-Site Request Forgery
Shiptimize for WooCommerce <= 3.1.86 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.