Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
WooCommerce Product Table Lite <= 3.5.1 - Unauthenticated Arbitrary Shortcode Execution
WappPress <= 6.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection
BerqWP <= 1.7.6 - Unauthenticated Arbitrary File Uplaod
Viral Signup <= 2.1 - Unauthenticated SQL Injection
Sunshine Photo Cart <= 3.2.1 - Missing Authorization
Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
Registrations for the Events Calendar <= 2.12.1 - Missing Authorization
Ultimate Addons for Beaver Builder – Lite <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hummingbird <= 3.9.1 - Cross-Site Request Forgery
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
Aruba HiSpeed Cache <= 2.0.12 - Missing Authorization
Viral Signup <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Missing Authorization to Unauthenticated Arbitrary Post/Page Deletion
Themify Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Blockspare <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
ParcelPanel <= 4.3.2 - Reflected Cross-Site Scripting
Participants Database <= 2.5.9.2 - Unauthenticated PHP Object Injection
Robin image optimizer <= 1.6.9 - Missing Authorization
Slider by Soliloquy <= 2.7.6 - Missing Authorization to Authenticated (Author+) Stored Cross-Site Scripting
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.15.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Woffice <= 5.4.10 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.