Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersOpenCart Product Display <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
NV Slider <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alert Me! <= 0.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
活动链接推广插件 <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Be Shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
My Restaurant Menu <= 0.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gboy Custom Google Map <= 1.2 - Authenticated (Contributor+) SQL Injection
best bootstrap widgets for elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting
AchillesTheme-shortcodes <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Icon Widget <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CE21 Suite <= 2.2.0 - Authentication Bypass
Pay With Stripe <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Minical Hotel Booking Plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Posts Search <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
OS Our Team <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
PF Timer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bamboo Enquiries <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Image Carousel Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion
Adventure Bucket List <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.