Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
Wishlist for WooCommerce <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
reCAPTCHA for all <= 2.26 - Cross-Site Request Forgery
WPBot Pro Wordpress Chatbot <= 13.6.5 - Authenticated (Subscriber+) Arbitrary File Deletion
Dash <= 1.3 - Unauthenticated PHP Object Injection
User Manager <= 2.9.12 - Authenticated (Subscriber+) PHP Object Injection
Product Code for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Database Update
Bot for Telegram on WooCommerce <= 1.2.6 - Missing Authorization
RSVPMarker <= 11.5.6 - Authenticated (Contributor+) SQL Injection
WP Image Mask <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
GDPR CCPA Compliance Support <= 2.7.3 - Missing Authorization
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affiliates Manager Google reCAPTCHA Integration <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Embed and Integrate Etsy Shop <= 1.0.4 - Missing Authorization
Japanized For WooCommerce <= 2.6.40 - Cross-Site Request Forgery
SKT Blocks <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Coupons & Add to Cart by URL Links for WooCommerce <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dynamic Pricing & Discounts Lite for WooCommerce <= 2.0.3 - Cross-Site Request Forgery
The Business <= 1.6.1 - Unauthenticated PHP Object Injection
Exclusive Addons Elementor <= 2.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Url Rewrite Analyzer <= 1.3.3 - Missing Authorization
Change Add to Cart Button Text for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Back Button Widget <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.