Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Maximum Products per User for WooCommerce <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Add Featured Image Custom Link <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
Infility Global <= 2.15.36 - Unauthenticated SQL Injection
Questionar for Elementor <= 1.1.7 - Missing Authorization
Responsive Block Control <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Indoor Plants <= 1.2.7 - Unauthenticated Local File Inclusion
Easy Upload Files During Checkout <= 3.0.0 - Missing Authorization
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Missing Authorization
User Specific Content <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Photo Gallery <= 2.7.7.26 - Reflected Cross-Site Scripting
Audiomack <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Zoho ZeptoMail <= 3.3.1 - Cross-Site Request Forgery
Web and WooCommerce Addons for WPBakery Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
SensitiveTagCloud <= 1.4.1 - Cross-Site Request Forgery
Behance Portfolio Manager <= 1.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Modern Housewife <= 1.0.12 - Unauthenticated Local File Inclusion
Add Custom Codes <= 4.80 - Authenticated (Author+) Stored Cross-Site Scripting
Appointify <= 1.0.8 - Cross-Site Request Forgery
Pearson Specter <= 1.11.3 - Unauthenticated Local File Inclusion
Pets Land <= 1.2.8 - Unauthenticated Local File Inclusion
Hobo <= 1.0.10 - Unauthenticated Local File Inclusion
Worker for WPBakery <= 1.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.