Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersOut Of Stock Badge <= 2.0 - Cross-Site Request Forgery to Stored Cross-site Scripting
소셜 공유 버튼 By 코스모스팜 <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced What should we write next about <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Build App Online <= 1.0.22 - Cross-Site Request Forgery
WP Revisions Manager <= 1.0.2 - Cross-Site Request Forgery
Znajdź Pracę z Praca.pl <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Vertical Carousel <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates < 2.9.1 - Reflected Cross-Site Scripting
SimpleSchema <= 1.7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Donate Me <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CultBooking Hotel Booking Engine <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ArCa Payment Gateway <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Administrator+) SQL Injection
Smart Marketing SMS and Newsletters Forms <= 5.0.4 - Missing Authorization
Yahoo! WebPlayer <= 2.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Simple Header and Footer <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mins To Read <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Best Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Image Gallery Plugin <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Button Plus <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
SpatialMatch IDX <= 3.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mail Picker <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.