Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cart tracking for WooCommerce <= 1.0.17 - Authenticated (Administrator+) SQL Injection
DELUCKS SEO <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wiki Embed <= 1.4.6 - Cross-Site Request Forgery
Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ultimate WP Mail <= 1.3.4 - Authenticated (Contributor+) SQL Injection
WP Podcasts Manager <= 1.3 - Cross-Site Request Forgery
Pays – WooCommerce Payment Gateway <= 2.6 - Cross-Site Request Forgery
ClickWhale <= 2.4.6 - Missing Authorization
Amazon Product in a Post <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
워드프레스 결제 심플페이 <= 5.2.11 - Cross-Site Request Forgery
Cozy Blocks <= 2.1.22 - Missing Authorization
LessButtons Social Sharing and Statistics <= 1.6.1 - Cross-Site Request Forgery
N360 | Splash Screen <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Email Notification on Login <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Music Player for WooCommerce <= 1.5.1 - Missing Authorization
Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Front User Submit / Front Editor <= 4.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation
Graphina <= 3.0.4 - Cross-Site Request Forgery to Local File Inclusion
XT Event Widget for Social Events <= 1.1.7 - Authenticated (Contributor+) Local File Inclusion
Web Accessibility with Max Access <= 2.0.9 - Cross-Site Request Forgery
Better Search <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.