Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Raychat <= 2.1.0 - Missing Authorization
Print Invoice & Delivery Notes for WooCommerce <= 5.5.0 - Cross-Site Request Forgery
TicketBAI Facturas para WooCommerce <= 3.21 - Missing Authorization
POEditor <= 0.9.10 - Cross-Site Request Forgery
ShortLinks Pro <= 1.0.7 - Authenticated (Administrator+) SQL Injection
Direct Checkout for WooCommerce Lite <= 1.0.3 - Missing Authorization
Crawlomatic Multisite Scraper Post Generator <= 2.6.8.2 - Missing Authorization
HT Team Member <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Recall <= 16.26.14 - Cross-Site Request Forgery
Pinterest Verify Meta Tag <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirect
The Holiday Calendar <= 1.18.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Shortcodes Ultimate <= 7.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
BRW <= 1.8.6 - Authenticated (Contributor+) Local File Inclusion
Konami Easter Egg <= v0.4 - Cross-Site Request Forgery
Pay with Contact Form 7 <= 1.0.4 - Cross-Site Request Forgery
Widgetize Pages Light <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Wordapp <= 1.7.0 - Missing Authorization
Contact Form <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Store Locator WordPress <= 1.5.2 - Authenticated (Admin+) Arbitrary File Upload
Payment QR WooCommerce <= 1.1.6 - Missing Authorization
Car Repair Services <= 5.0 - Unauthenticated Server-Side Request Forgery
Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.