Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersAutoParts <= 1.5.8 - Unauthenticated Local File Inclusion
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
Melania <= 2.5.0 - Unauthenticated Local File Inclusion
Energia <= 1.1.2 - Unauthenticated Arbitrary File Upload
Myour <= 1.5.1 - Unauthenticated Local File Inclusion
Right Way <= 4.0 - Unauthenticated Local File Inclusion
CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import
Mella <= 1.2.29 - Unauthenticated Local File Inclusion
Reprizo <= 1.0.8 - Unauthenticated Local File Inclusion
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'
Shabat Keeper <= 0.4.4 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Lesson Plan Book <= 1.3 - Reflected Cross-Site Scripting
MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting
Top Position Google Finance <= 0.1.0 - Reflected Cross-Site Scripting
BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure
VideoPro <= 2.3.8.1 - Unauthenticated Local File Inclusion
Athens <= 1.1.6 - Unauthenticated Local File Inclusion
Anarkali <= 1.0.9 - Unauthenticated Local File Inclusion
Amuli <= 2.3.0 - Unauthenticated Local File Inclusion
Depot <= 1.16 - Unauthenticated Local File Inclusion
nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Navian <= 1.5.4 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.