Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Insecure Direct Object Reference in Advanced Loyalty Program: Loyalty Points module for PrestaShop
Improper neutralization of SQL parameter in PrestaShow Google Integrator module for PrestaShop
XWiki vulnerable to Denial of Service attack through attachments
XWiki Remote Code Execution Vulnerability via User Registration
XWiki has no right protection on rollback action
@fastify/reply-from JSON Content-Type parsing confusion
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Formidable Forms <= 6.7 - HTML Injection
Football pool <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Droit Elementor Addons <= 3.1.5 - Cross-Site Request Forgery
WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
GD Rating System <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting via IP
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Word Replacer Pro <= 1.0 - Missing Authorization
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
Seraphinite Accelerator <= 2.20.47 - Unauthenticated Sensitive Information Exposure via Log File
MailerLite – WooCommerce integration <= 2.0.8 - Cross-Site Request Forgery via Multiple AJAX Functions
Advanced Flamingo <= 1.0 - Cross-Site Request Forgery
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions
LiveChat WooCommerce <= 2.2.16 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.