Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersQuery Shortcode <= 0.2.1 - Authenticated (Contributor+) Local File Inclusion via 'lens' Shortcode Attribute
GoStats for WordPress <= 1.4 - Cross-Site Request Forgery via gostats_manage() Function
Animation Addons for Elementor <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Weather Widget
Raider Spirit <= 1.1.4 - Unauthenticated Local File Inclusion
Spin - Cricket Team Sports WordPress Theme + AI <= 1.8 - Unauthenticated Local File Inclusion
Fermentio — Brewery and Winemaking Restaurant WordPress Theme <= 1.5.0 - Unauthenticated Local File Inclusion
Medeus <= 1.14 - Unauthenticated Local File Inclusion
Geya - Renewable Energy & Ecology WordPress Theme <= 1.15 - Unauthenticated Local File Inclusion
SW Core <= 1.7.18 - Authenticated (Contributor+) Local File Inclusion
Planty <= 1.14.0 - Unauthenticated Local File Inclusion
MaxiNet - Internet & IPTV Provider Elementor Template Kit <= 1.2.10 - Unauthenticated Local File Inclusion
Modernee <= 1.6.0 - Unauthenticated Local File Inclusion
Crafti - Handmade Store WordPress Theme <= 1.12 - Unauthenticated Local File Inclusion
Wanium <= 1.9.8 - Unauthenticated Local File Inclusion
Gat <= 1.16 - Unauthenticated Local File Inclusion
Dazzle <= 1.0.0 - Unauthenticated Local File Inclusion
Food Drop <= 1.3 - Unauthenticated Local File Inclusion
Iona <= 1.0.8 - Unauthenticated Local File Inclusion
Imba <= 1.5.0 - Unauthenticated Local File Inclusion
Dom <= 1.24 - Unauthenticated Local File Inclusion
Fortius <= 2.3.0 - Unauthenticated Local File Inclusion
CarZone - A Complete Car Dealer HTML Wire-Frame <= 3.7 - Unauthenticated Arbitrary File Deletion
LuxMed | Medicine & Healthcare Doctor WordPress <= 1.2.2 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.