Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
NP Quote Request for WooCommerce <= 2.4.15 - Unauthenticated Information Exposure
YAHMAN Add-ons <= 0.9.30 - Unauthenticated Remote Code Execution
Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Missing Authorization
Forminator Forms <= 1.57.2.0 - Missing Authorization to Unauthenticated Arbitrary Post Meta Injection
Recipe Maker 10.3.0 - 10.8.1 - Authenticated (Subscriber+) Information Exposure
Paymob for WooCommerce <= 4.1.13 - Unauthenticated Payment Bypass
Booking Manager <= 2.1.20 - Authenticated (Subscriber+) Insecure Direct Object Reference
Easy Hide Login <= 1.6 - Unauthenticated Information Exposure
Forminator Forms <= 1.57.2.0 - Missing Authorization
Subscribe Forms 1.4.1 - 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Points and Rewards for WooCommerce <= 2.10.3 - Missing Authorization
Paid Member Subscriptions <= 3.0.0 - Unauthenticated CAPTCHA Bypass
Divi Dash <= 1.0.6 - Unauthenticated IP Spoofing to Protection Bypass
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.69 - Authenticated (Author+) Stored Cross-Site Scripting
JSM Show Post Metadata <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WC Fields Factory <= 4.1.10 - Missing Authorization
MasterStudy LMS <= 3.7.49 - Authenticated (Subscriber+) Insecure Direct Object Reference
Recipe Maker <= 10.8.1 - Authenticated (Subscriber+) Information Exposure
Paymob for WooCommerce <= 4.1.13 - Missing Authorization
Directorist 8.1 - 8.9.4 - Unauthenticated Information Exposure
Real3D Flipbook Lite <= 5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Directorist 3.1.0 - 8.9.4 - Missing Authorization
Zportals <= 6.4.1 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.