Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Blog Filter <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Delivery Date for WooCommerce – Lite <= 3.2.0 - Missing Authorization
Backpack Traveler <= 2.10.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Netgsm <= 2.9.63 - Reflected Cross-Site Scripting
Slider Templates <= 1.0.3 - Missing Authorization
WpStream <= 4.9.5 - Missing Authorization
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Arcane <= 3.6.6 - Missing Authorization
Visitor Stats Widget <= 1.5.0 - Reflected Cross-Site Scripting
Poptics <= 1.0.20 - Authenticated (Contributor+) Information Exposure
App Bar <= 1.5 - Reflected Cross-Site Scripting
Scroll rss excerpt <= 5.0 - Reflected Cross-Site Scripting
weForms <= 1.6.25 - Missing Authorization
Flaming Password Reset <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting
Fana <= 1.1.35 - Authenticated (Contributor+) Local File Inclusion
Popup box <= 6.0.7 - Cross-Site Request Forgery
Astra Widgets <= 1.2.16 - Authenticated (Editor+) Stored Cross-Site Scripting
Newsletters <= 4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
FlippingBook <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Discussion Board <= 2.5.7 - Missing Authorization
H5P <= 1.16.1 - Missing Authorization
HR Management Lite <= 3.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.