Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
WP Event Aggregator <= 1.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Uncanny Automator Pro <= 5.3 - Reflected Cross-Site Scripting
WP Photo Album Plus <= 8.8.02.002 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MBE eShip <= 2.1.2 - Information Exposure
Product Delivery Date for WooCommerce – Lite <= 2.7.2 - Missing Authorization
Patricia Blog <= 1.2 - Cross-Site Request Forgery
DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection
HitPay Payment Gateway for WooCommerce <= 4.1.3 - Information Exposure via Log Files
MakeStories (for Google Web Stories) <= 3.0.3 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery
Magical Addons For Elementor <= 1.1.41 - Authenticated (Subscriber+) Server-Side Request Forgery
OnePress <= 2.3.8 - Authenticated (Author+) Stored Cross-Site Scripting
Seraphinite Post .DOCX Source <= 2.16.9 - Authenticated (Subscriber+) Server-Side Request Forgery
ReDi Restaurant Reservation <= 24.0422 - Missing Authorization
Widgets Reset <= 0.1 - Cross-Site Request Forgery to Settings Update
Ultimate Classified Listings <= 1.3 - Reflected Cross-Site Scripting
Booking Ultra Pro <= 1.1.13 - Unauthenticated Local File Inclusion
Seraphinite Post .DOCX Source <= 2.16.9 - Missing Authorization
ExS Widgets <= 0.3.1 - Authenticated (Contributor+) Local File Inclusion
EleForms <= 2.9.9.9 - Missing Authorization
WordPress Team Manager <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion
Wallet System for WooCommerce <= 2.5.13 - Information Exposure via Log Files
ElementInvader Addons for Elementor <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.