Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Easy Upload Files During Checkout <= 3.0.0 - Missing Authorization
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Missing Authorization
User Specific Content <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Gallery <= 2.7.7.26 - Reflected Cross-Site Scripting
Audiomack <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Zoho ZeptoMail <= 3.3.1 - Cross-Site Request Forgery
Web and WooCommerce Addons for WPBakery Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
SensitiveTagCloud <= 1.4.1 - Cross-Site Request Forgery
Behance Portfolio Manager <= 1.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Modern Housewife <= 1.0.12 - Unauthenticated Local File Inclusion
Add Custom Codes <= 4.80 - Authenticated (Author+) Stored Cross-Site Scripting
Appointify <= 1.0.8 - Cross-Site Request Forgery
Pearson Specter <= 1.11.3 - Unauthenticated Local File Inclusion
Pets Land <= 1.2.8 - Unauthenticated Local File Inclusion
Hobo <= 1.0.10 - Unauthenticated Local File Inclusion
Worker for WPBakery <= 1.1.1 - Missing Authorization
Core Web Vitals & PageSpeed Booster <= 1.0.27 - Missing Authorization
DiveIt <= 1.4.3 - Unauthenticated Local File Inclusion
OpenHook <= 4.3.1 - Cross-Site Request Forgery
AdWords Conversion Tracking Code <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gmedia Photo Gallery <= 1.24.1 - Cross-Site Request Forgery
Signature Add-On for Gravity Forms <= 1.8.6 - Missing Authorization
UnGrabber <= 3.1.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.