Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Related Products Manager for WooCommerce <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Lewe ChordPress <= 3.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
JobSearch < 3.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Video List Manager <= 1.7 - Missing Authorization
ContentStudio <= 1.3.7 - Missing Authorization
PixelBeds Channel Manager and Hotel Booking Engine <= 1.0 - Cross-Site Request Forgery
JobWP <= 2.4.0 - Cross-Site Request Forgery
WP Roadmap <= 2.1.3 - Authenticated (Contributor+) SQL Injection
Zapier for WordPress <= 1.5.2 - Missing Authorization
Spoki <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
App Builder <= 5.5.7 - Missing Authorization
Sitekit <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
PDPA Consent for Thailand <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Hostel <= 1.1.5.7 - Reflected Cross-Site Scripting
Contact Form 7 AWeber Extension <= 0.1.42 - Missing Authorization
ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) Full Path Disclosure
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Authenticated (Contributor+) Server-Side Request Forgery
Firelight Lightbox <= 2.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Import YouTube videos as WP Posts <= 2.1 - Missing Authorization
WP-Recall <= 16.26.14 - Missing Authorization
Automatically Hierarchic Categories in Menu <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inventory Presser <= 15.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
TinyNav <= 1.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.