Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersExtensions For CF7 <= 3.2.0 - Authenticated (Admin+) Sever-Side Request Forgery
VForm <= 3.0.5 - Missing Authorization
RSVPMarker <= 11.4.5 - Missing Authorization
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.7.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
Event post <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist for WooCommerce <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Modal Window <= 6.1.4 - Cross-Site Request Forgery to Settings Ipdate
People Lists <= 1.3.10 - Missing Authorization
Super Block Slider <= 2.7.9 - Missing Authorization
Bug Library <= 2.1.4 - Authenticated (Contributor+) SQL Injection
Atarim <= 4.0.8 - Unauthenticated Stored Cross-Site Scripting
ShMapper by Teplitsa <= 1.5.0 - Authenticated (Editor+) Stored Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.3.1 - Missing Authorization
Admin and Site Enhancements (ASE) Pro <= 7.6.1.1 - Missing Authorization
GDPR CCPA Compliance Support <= 2.7.1 - Missing Authorization
Auction Nudge – Your eBay on Your Site <= 7.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Create with Code <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
LearnPress <= 4.2.7.1 - Authenticated (Subscriber+) Open Redirect
Button Generator – easily Button Builder <= 3.1.1 - Cross-Site Request Forgery
Really Simple SSL <= 9.1.4 - Cross-Site Request Forgery
Post Duplicator <= 2.35 - Missing Authorization
WP Fast Total Search <= 1.78.258 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.