Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Tutor LMS BunnyNet Integration <= 1.0.0 - Authenticated (Tutor instructor+) Stored Cross-Site Scripting
GDPR CCPA Compliance Support <= 2.7.4 - Missing Authorization
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 - Unauthenticated Stored Cross-Site Scripting
Order Listener for WooCommerce <= 3.6.1 - Missing Authorization
Table of Contents Creator <= 1.6.4.1 - Reflected Cross-Site Scripting
ShoutOut <= 4.0.2 - Reflected Cross-Site Scripting
Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Author+) Arbitrary File Upload
Simple Membership <= 4.6.9 - Missing Authorization
SumUp Payment Gateway For WooCommerce <= 2.7.9 - Missing Authorization
My Post Order <= 1.2.1.1 - Reflected Cross-Site Scripting
SEO Booster <= 7.3.2 - Missing Authorization
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 - Unauthenticated Stored Cross-Site Scripting
PostX <= 5.0.3 - Missing Authorization
Points and Rewards for WooCommerce <= 2.9.5 - Missing Authorization
Ecwid Shopping Cart <= 7.0.5 - Missing Authorization
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Broadstreet Ads <= 1.52.1 - Missing Authorization
XStore Core < 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Open Chinese Convert has Out-of-bounds Write
Ninja Tables – Easy Data Table Builder <= 5.2.5 - Authenticated (Contributor+) Information Exposure
XStore <= 9.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
XStore <= 9.6.4 - Unauthenticated Arbitrary Shortcode Execution
AJAX Hits Counter + Popular Posts Widget <= 0.10.210305 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.