Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Wishlist <= 1.0.44 - Cross-Site Request Forgery
1 Click WordPress Migration <= 3.1.14 - Unauthenticated Information Disclsoure
Bookingor <= 2.0.1 - Missing Authorization
Slider a SlidersPack <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Video & Photo Gallery for Ultimate Member <= 1.1.3 - Authenticated (Administrator+) SQL Injection
Easy Query – WP Query Builder <= 2.0.4 - Authenticated (Administrator+) SQL Injection
Motors <= 1.4.71 - Authenticated (Contributor+) Local File Inclusion
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Maps for WP <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced All in One Admin Search by WP Spotlight <= 1.1.1 - Cross-Site Request Forgery
uListing <= 2.1.9 - Authenticated (Administrator+) SQL Injection
Order Delivery Date for WooCommerce 2.0 - 12.3.1- Unauthenticated Arbitrary Options Update
StaffList <= 3.2.6 - Missing Authorization
WP Genealogy – Your Family History Website <= 0.1.9 - Missing Authorization
eaSYNC <= 1.3.19 - Missing Authorization
Gallery Blocks with Lightbox <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Contact Form, Drag and Drop Form Builder Plugin <= 4.8.5 - Missing Authorization
Course Booking System <= 6.1 - Missing Authorization
Social Intents <= 1.6.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
QR Code Tag for WC order emails <= 1.9.36 - Cross-Site Request Forgery
Gutenify <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Behance Portfolio Manager <= 1.7.5 - Authenticated (Administrator+) SQL Injection
Official CleverReach Plugin for WooCommerce <= 3.4.4 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.