Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
SKT Blocks <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Coupons & Add to Cart by URL Links for WooCommerce <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dynamic Pricing & Discounts Lite for WooCommerce <= 2.0.3 - Cross-Site Request Forgery
The Business <= 1.6.1 - Unauthenticated PHP Object Injection
Exclusive Addons Elementor <= 2.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Url Rewrite Analyzer <= 1.3.3 - Missing Authorization
Change Add to Cart Button Text for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Back Button Widget <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mega Menu Block <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Legal Pages <= 1.4.5 - Missing Authorization
Additional Custom Emails & Recipients for WooCommerce <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
EAN for WooCommerce <= 5.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.2.4 - Cross-Site Request Forgery
WP Job Portal <= 2.3.2 - Unauthenticated Insecure Direct Object Reference
Sitewide Discount for WooCommerce: Apply Discount to All Products <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Mapa Politico España <= 3.8.0 - Cross-Site Request Forgery
HotStar – Multi-Purpose Business Theme <= 1.4 - Unauthenticated PHP Object Injection
Projectopia <= 5.1.17 - Missing Authorization
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL
Bux Woocommerce <= 1.2.3 - Missing Authorization
Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.