Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersJob Board Manager <= 2.1.59 - Cross-Site Request Forgery
WooCommerce Quick View <= 1.1.1 - Unauthenticated Information Disclosure
Premium Packages <= 5.9.6 - Authenticated (Administrator+) SQL Injection
WC Marketplace <= 4.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Email Subscription Popup <= 1.2.23 - Authenticated (Administrator+) SQL Injection
WP VR <= 8.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Houzez <= 3.4.0 - Missing Authorization
Simple Video Management System <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Side Menu Lite <= 5.3.1 - Cross-Site Request Forgery to Settings Update
Attire Blocks <= 1.9.6 - Cross-Site Request Forgery
PageLayer <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate Coming Soon & Maintenance <= 1.0.9 - Cross-Site Request Forgery
Chained Quiz <= 1.3.2.9 - Authenticated (Admin+) Server-Side Request Forgery
12 Step Meeting List <= 3.16.5 - Unauthenticated Sensitive Information Exposure
WP Go Maps <= 9.0.40 - Cross-Site Request Forgery
Caching Compatible Cookie Opt-In and JavaScript <= 0.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
AI Chatbot for WordPress – Hyve Lite <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Paytium <= 4.4.11 - Unauthenticated Full Path Disclosure
FAQ Builder AYS <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
HelloAsso <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
PPOM for WooCommerce <= 33.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Custom Product Tabs Lite for WooCommerce <= 1.9.0 - Authenticated (Shop Manager+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.