Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersPDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPForms <= 1.9.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
Country Blocker <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Event Tickets with Ticket Scanner <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Shiptimize for WooCommerce <= 3.1.86 - Reflected Cross-Site Scripting
Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Designer <= 1.4.1 - Authenticated (Contributor+) Local File Inclusion
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
Minimum and Maximum Quantity for WooCommerce <= 2.0.0 - Missing Authorization
Wot Elementor Widgets <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Prodigy Commerce <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Contact Form Builder <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via livesite-pay Shortcode
WIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.