Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
EU DSGVO Helper <= 1.0.6.1 - Reflected Cross-Site Scripting
Photo Video Store <= 21.07 - Reflected Cross-Site Scripting
WooCommerce Order Search <= 1.1.0 - Reflected Cross-Site Scripting
Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
Login Watchdog <= 1.0.4 - Reflected Cross-Site Scripting
Custom Users Order <= 4.2 - Reflected Cross-Site Scripting
Admin Menu Organizer <= 1.0.1 - Reflected Cross-Site Scripting
WAH Forms <= 1.0 - Missing Authorization
Interactive Page Hierarchy <= 1.0.1 - Missing Authorization
iSpring Embedder <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Reflected Cross-Site Scripting
Hack me if you can <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Unauthenticated PHP Object Injection
.TUBE Video Curator <= 1.1.9 - Reflected Cross-Site Scripting
Marmoset Viewer <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gallery: Hybrid – Advanced Visual Gallery <= 1.4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Import Users to MailChimp <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
user files <= 2.4.2 - Unauthenticated Arbitrary File Upload
PDF.js Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Smart Tooltip <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Unique UX <= 0.9.2 - Reflected Cross-Site Scripting
Plestar Directory Listing <= 1.0 - Reflected Cross-Site Scripting
Realty Workstation <= 1.0.45 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.