Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection
ARPrice <= 4.1.3 - Authenticated (Subscriber+) SQL Injection
Post/Page Copying Tool <= 2.0.0 - Unauthenticated Sensitive Information Exposure
Wp advertising management <= 1.0.3 - Reflected Cross-Site Scripting
Simplified Plugin <= 1.0.6 - Unauthenticated Arbitrary File Upload
Store Commerce <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Email Reminders <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
ARPrice <= 4.1.3 - Unauthenticated PHP Object Injection
Kikx Simple Post Author Filter <= 1.0 - Reflected Cross-Site Scripting
PlainInventory <= 3.1.6 - Unauthenticated PHP Object Injection
BSK Forms Blacklist <= 3.9 - Cross-Site Request Forgery
Order Audit Log for WooCommerce <= 2.0 - Reflected Cross-Site Scripting
Free Google Maps <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Locatoraid Store Locator <= 3.9.50 - Unauthenticated PHP Object Injection
Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Allada T-shirt Designer for Woocommerce <= 1.1 - Missing Authorization
Opentracker Analytics <= 1.3 - Reflected Cross-Site Scripting
Data Dash <= 1.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Gallery Images Ape <= 2.2.8 - Reflected Cross-Site Scripting
ARPrice <= 4.1.3 - Unauthenticated SQL Injection
Astra Widgets <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
OZ Canonical <= 0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.