Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Shiptimize for WooCommerce <= 3.1.86 - Reflected Cross-Site Scripting
Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Designer <= 1.4.1 - Authenticated (Contributor+) Local File Inclusion
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
Minimum and Maximum Quantity for WooCommerce <= 2.0.0 - Missing Authorization
Wot Elementor Widgets <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Prodigy Commerce <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Spring LDAP data exposure vulnerability
Firepad allows insecure document access
Contact Form Builder <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via livesite-pay Shortcode
WIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
Modified package published to npm, containing malware that exfiltrates private key material
Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion
drupal/entity_form_steps - SA-CONTRIB-2024-071
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.