Free plan, no credit card, first error in minutes.
Create a Project for FreeDiscover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
FunnelKit for WordPress is vulnerable to unauthenticated stored cross-site scripting via checkout order fields. Attackers can inject arbitrary scripts that execute in the browser of users viewing affected pages.
A vulnerability in the Avada theme for WordPress allows authenticated users to store malicious scripts in author profile social links. If clicked when links do not open in a new window, the script executes in the victim's browser.
A stored cross-site scripting vulnerability in the Retainful plugin for WordPress allows authenticated attackers with subscriber-level permissions to inject malicious scripts into web pages.
A vulnerability in WebToffee WooCommerce PDF Invoices through 5.0.2 allows unauthenticated attackers to view sensitive customer order documents if guest access is enabled and order details are known.
A critical vulnerability in the PPOM for WooCommerce WordPress plugin allows unauthenticated attackers to delete and expose arbitrary files on the server, potentially leading to remote code execution.
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.