Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Simple Membership <= 4.6.9 - Missing Authorization
SumUp Payment Gateway For WooCommerce <= 2.7.9 - Missing Authorization
My Post Order <= 1.2.1.1 - Reflected Cross-Site Scripting
SEO Booster <= 7.3.2 - Missing Authorization
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 - Unauthenticated Stored Cross-Site Scripting
PostX <= 5.0.3 - Missing Authorization
Points and Rewards for WooCommerce <= 2.9.5 - Missing Authorization
Ecwid Shopping Cart <= 7.0.5 - Missing Authorization
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Broadstreet Ads <= 1.52.1 - Missing Authorization
XStore Core < 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Open Chinese Convert has Out-of-bounds Write
Ninja Tables – Easy Data Table Builder <= 5.2.5 - Authenticated (Contributor+) Information Exposure
XStore <= 9.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
XStore <= 9.6.4 - Unauthenticated Arbitrary Shortcode Execution
AJAX Hits Counter + Popular Posts Widget <= 0.10.210305 - Missing Authorization
Sober <= 3.5.12 - Missing Authorization
Hyyan WooCommerce Polylang Integration <= 1.5.0 - Missing Authorization
Smart Product Viewer <= 1.5.4 - Missing Authorization
Visual Link Preview <= 2.2.9 - Missing Authorization
risesoft-y9 Digital-Infrastructure has a SQL injection vulnerability
Spectra <= 2.19.17 - Missing Authorization
Houzez Theme - Functionality <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.