Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersContact Form Email <= 1.3.37 - Unauthenticated Stored Cross-Site Scripting
Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection
WordPress Core < 6.2.1 - Cross-Site Request Forgery
Essential Addons for Elementor Pro <= 5.4.8 - Reflected Cross-Site Scripting
Quiz Maker <= 6.4.2.6 - Reflected Cross-Site Scripting
WP Custom Cursors < 3.2 - Cross-Site Request Forgery
video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting
WooCommerce Product Add-ons <= 6.1.3 - Authenticated (Shop Manager+) PHP Object Injection
Predictive Search <= 1.2.2 - Missing Authorization
ConvertKit <= 2.2.0 - Reflected Cross-Site Scripting
Predictive Search <= 1.2.2 - Missing Authorization
Stop Spammers Security <= 2022.6 - Authenticated (Admin+) Stored Cross-Site Scripting
WooCommerce Pre-Orders <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Pre-Orders <= 1.9.0 - Unauthenticated Cross-Site Scripting
WooCommerce Product Add-ons <= 6.1.3 - Cross-Site Request Forgery
Essential Addons for Elementor Pro <= 5.4.8 - Unauthenticated Server-Side Request Forgery
WooCommerce Brands <= 1.6.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AutomateWoo <= 5.7.1 - Authenticated (Shop manager+) SQL Injection
Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting
Stop Spammers Security <= 2022.6 - Reflected Cross-Site Scripting
RegistrationMagic <= 5.2.1.0 - Authentication Bypass
WooCommerce Product Recommendations < 2.3.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.