Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Unauthenticated Privilege Escalation
VOD Infomaniak <= 1.5.6 - Reflected Cross-Site Scripting
Easy Accept Payments <= 4.9.10 - Missing Authorization
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to List Deletion
Virtue <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
WP Masquerade <= 1.1.0 - Authenticated (Subscriber+) Account Takeover
OrderConvo <= 12.4 - Missing Authorization to Arbitrary File Upload
WooCommerce Amazon Affiliates - Wordpress Plugin < 14.1.00 - Authenticated (Subscriber+) Privilege Escalation
SSU <= 1.5.0 - Missing Authorization
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection
Custom field finder <= 0.3 - Authenticated (Author+) PHP Object Injection
Opal Widgets For Elementor <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Knowledge Base documentation & wiki plugin – BasePress <= 2.16.1 - Missing Authorization
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection
ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
PopupAlly <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
XStore Core <= 5.3.8 - Unauthenticated PHP Object Injection
Leaky Paywall <= 4.20.8 - Missing Authorization to Price Manipulation
Newsletter Popup <= 1.2 - Unauthenticated Stored Cross-Site Scripting
XStore Core <= 5.3.8 - Authenticated (Subscriber+) Limited Arbitrary File Download
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Client Dash <= 2.2.1 - Missing Authorization
The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.