Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersCrawlomatic Multisite Scraper Post Generator <= 2.6.8.2 - Unauthenticated Information Exposure via Log Files
Hydra Booking <= 1.1.10 - Authenticated (Contributor+) SQL Injection
GamiPress <= 7.4.5 - Authenticated (Administrator+) SQL Injection
WP Post Corrector <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Store Locator WordPress <= 1.5.1 - Authenticated (Administrator+) SQL Injection
KI Live Video Conferences <= 5.5.15 - Unauthenticated Information Disclosure
Libro de Reclamaciones y Quejas <= 0.9 - Authenticated (Administrator+) SQL Injection
Persian Woocommerce SMS <= 7.0.10 - Authenticated (Shop manager+) SQL Injection
ShortLinks Pro <= 1.0.7 - Authenticated (Administrator+) SQL Injection
MultiVendorX <= 4.2.22 - Unauthenticated Information Exposure
elfsight Contact Form widget <= 2.3.1 - Unauthenticated Information Exposure
WPCHURCH <= 2.7.0 - Unauthenticated SQL Injection
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated SQL Injection
Category Icon <= 1.0.1 - Authenticated (Author+) XML External Entity Injection
WP Lead Capturing Pages < 2.6 - Unauthenticated SQL Injection
Multi CryptoCurrency Payments <= 3.1.0 - Unauthenticated SQL Injection
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates <= 2.9.6 - Unauthenticated SQL Injection
Product Filter Pro < 2.9.6 - Unauthenticated SQL Injection
Recover abandoned cart for WooCommerce <= 2.5 - Unauthenticated SQL Injection
MyStyle Custom Product Designer <= 3.21.1 - Unauthenticated SQL Injection
Ultimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function
WooCommerce Orders & Customers Exporter <= 5.0 - Authenticated (Subscriber+) Information Exposure
WP Guppy <= 4.3.3 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.