Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersKing Addons for Elementor <= 51.1.75 - Reflected XSS via Posts Grid Widget
Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management <= 8.90.0 - Unauthenticated Stored Cross-Site Scripting
Spectra Legacy – Gutenberg Blocks < 2.20.0 - Authenticated (Contributor+) CSS Injection
RegistrationMagic <= 6.0.9.4 - Unauthenticated Price Manipulation
wpForo Forum <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slider Pro <= 4.8.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.6.10.1 - Missing Authorization
Builderall for WordPress <= 3.0.1 - Missing Authorization to Unauthenticated OAuth Update
WC Buckaroo BPE Gateway <= 4.8.0 - Missing Authorization to Authenticated (Subscriber+) Unauthorized Order Refund
Simple Restrict < 1.2.9 - Authenticated (Contributor+) Information Exposure
Authora : Easy login with mobile number < 1.7.7 - Unauthenticated Privilege Escalation
RT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Pixel Tag Manager for WooCommerce – Google Analytics 4, Google Ads, and More Pixels < 2.2.1 - Unauthenticated Conversion Forge
Real Estate Manager Pro <= 12.8.5 - Reflected Cross-Site Scripting
CoCart <= 4.8.0 - Unauthenticated Price Manipulation
Five Star Restaurant Reservations <= 2.7.22 - Unauthenticated Insecure Direct Object Reference to Payment Bypass
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Deletion
W3SC Elementor to Zoho CRM <= 2.2.0 - Cross-Site Request Forgery to Settings Update
HUSKY - Products Filter Professional for WooCommerce <= 1.4.0 - Authenticated (Shop manager+) Local File Inclusion
RealHomes Memberships <= 3.0.0 - Authenticated (Subscriber+) Payment Bypass
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation
WordPress Core 6.8 - 7.0.1 - Unauthenticated SQL Injection via author__not_in Parameter
Profile Builder <= 3.16.3 - Privilege Escalation to Unauthenticated Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.