Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion
Custom WooCommerce Checkout Fields Editor <= 1.3.0 - Cross-Site Request Forgery
WordPress Announcement & Notification Banner Plugin – Bulletin <= 3.8.5 - Authenticated (Administrator+) SQL Injection
WP Travel Engine <= 5.7.9 - Unauthenticated SQL Injection
Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode
Molongui <= 4.7.7 - Authenticated (Author+) Insecure Direct Object Reference
OceanWP <= 3.5.4 - Missing Authorization to Sensitive Information Exposure via Limited Local File Inclusion
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Missing Authorization
weForms <= 1.6.20 - Missing Authorization
Booking Package <= 1.6.27 - Unauthenticated Price Manipulation
collectchat <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
Essential Blocks for Gutenberg <= 4.4.9 - Missing Authorization
Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Revisions Delete <= 1.5.3 - Cross-Site Request Forgery
WordPress Page Builder – Zion Builder <= 3.6.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Hotel Booking <= 2.0.9.2 - Missing Authorization
Lordicon Animated Icons <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 4.1.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.