Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersAardvark <= 2.19 - Missing Authorization
Slimstat Analytics <= 5.3.2 - Reflected Cross-Site Scripting
Aardvark <= 4.6.3 - Reflected Cross-Site Scripting
Widget Logic Visual <= 1.52 - Reflected Cross-Site Scripting
WPJobster <= 6.3.5 - Unauthenticated SQL Injection
Link Invoice Payment for WooCommerce <= 2.8.0 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation
Schedula <= 1.0 - Missing Authorization
WebP Conversion <= 2.1 - Missing Authorization
Kama Thumbnail <= 3.5.1 - Cross-Site Request Forgery
CLP Varnish Cache <= 1.0.2 - Missing Authorization
CartFlows – Checkout & Funnel Builder for WooCommerce <= 2.1.19 - Authenticated (Administrator+) PHP Object Injection
Tablesome <= 1.2.8 - Missing Authorization
Quick Restaurant Reservations <= 1.6.7 - Missing Authorization
Gallery PhotoBlocks <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Subscribe <= 1.2.16 - Missing Authorization
WiserReview Product Reviews for WooCommerce <= 2.9 - Missing Authorization
Nova Blocks <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
hCaptcha for WP <= 4.22.0 - Missing Authorization
Nexter Blocks <= 4.6.3 - Authenticated (Subscriber+) Information Exposure
FullCalendar <= 1.6 - Unauthenticated Information Exposure
Email Inquiry & Cart Options for WooCommerce <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Automatic Featured Images from Videos <= 1.2.7 - Missing Authorization
SiteLock Security <= 5.0.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.