Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersNelio Popups <= 1.3.5 - Missing Authorization
Shiprocket <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
SOHO - Photography WordPress <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting
Capella <= 2.5.5 - Unauthenticated PHP Object Injection
MailerLite – Signup forms (official) <= 1.7.18 - Missing Authorization
Uroan Core <= 1.4.4 - Unauthenticated SQL Injection
UpsellWP <= 2.2.5 - Missing Authorization
Popularis Extra <= 1.2.10 - Cross-Site Request Forgery
JAMstack Deployments <= 1.1.1 - Missing Authorization
Saasplate Core <= 1.2.8 - Unauthenticated SQL Injection
News Kit Addons For Elementor <= 1.4.2 - Missing Authorization
WP-CORS <= 0.2.2 - Missing Authorization
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
Emerce Core <= 1.8 - Unauthenticated SQL Injection
Bit Form <= 2.21.10 - Authenticated (Administrator+) SQL Injection
Medinik Core <= 1.3.6 - Unauthenticated SQL Injection
Recipe Maker <= 10.2.4 - Missing Authorization
Sendy <= 3.4.2 - Missing Authorization
Electio Core <= 1.4 - Unauthenticated SQL Injection
WPBookit Pro <= 1.6.18 - Missing Authorization
EventPrime <= 4.2.8.0 - Missing Authorization
ModelTheme Framework < 2.0.0 - Missing Authorization
Woodly Core <= 1.4 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.