Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAdmin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass
Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover
Broken Link Checker by AIOSEO <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
AI Content Pipelines <= 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Read More & Accordion <= 3.4.7 - Cross-Site Request Forgery to Local File Inclusion
Email Notifications for Updates <= 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
Spider Elements – Addons for Elementor <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Motors <= 1.4.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Download
WP w3all phpBB <= 2.9.8 - Cross-Site Request Forgery
DirectoryPress <= 3.6.22 - Cross-Site Request Forgery
WP Project Manager <= 2.6.24 - Cross-Site Request Forgery
WP ULike <= 4.7.9.1 - Missing Authorization to Unauthenticated Content Spoofing
Split Test For Elementor <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Xpro Theme Builder <= 1.2.8.4 - Missing Authorization
Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
TableOn – WordPress Posts Table Filterable <= 1.0.5.1 - Missing Authorization
Colibri Page Builder <= 1.0.319 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.