Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Woocommerce OpenPos <= 7.0.1 - Missing Authorization to Information Exposure
Send email only on Reply to My Comment <= 1.0.6 - Reflected Cross-Site Scripting
Internal Link Juicer: SEO Auto Linker for WordPress <= 2.24.3 - Cross-Site Request Forgery
ARForms Form Builder <= 1.6.7 - Reflected Cross-Site Scripting
Point <= 1.1 - Cross-Site Request Forgery
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Web Directory Free <= 1.7.1 - Reflected Cross-Site Scripting
SociallyViral <= 1.0.10 - Cross-Site Request Forgery
Gum Elementor Addon <= 1.3.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
User Activity Log Pro <= 2.3.4 - Missing Authorization
Seraphinite Accelerator Premium <= 2.21.13 - Cross-Site Request Forgery to Arbitrary File Deletion
SmartMag < 10.1.0 - Unauthenticated Sensitive Information Exposure via Log Files
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery
BuddyBoss Theme <= 2.4.61 - Cross-Site Request Forgery
Simple Post Notes <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Premium Addons for Elementor <= 4.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Business Card <= 1.0.0 - Authenticated (Admin+) Arbitrary File Uplaod
Zephyr Project Manager <= 3.3.97 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Accessibility Helper (WAH) <= 0.6.2.9 - Missing Authorization
Responsive Tabs <= 4.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.