Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Simple Membership <= 4.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Viral Loops WP Integration <= 3.8.1 - Missing Authorization
WP Maintenance Mode & Site Under Construction <= 4.3 - Cross-Site Request Forgery
Booqable Rental <= 2.4.25 - Cross-Site Request Forgery
WP Time Slots Booking Form <= 1.2.30 - Cross-Site Request Forgery
WebHotelier <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slack Notifications by dorzki <= 2.0.7 - Missing Authorization
BRW <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-CRM System <= 3.4.2 - Missing Authorization
BlockStrap Page Builder - Bootstrap Blocks <= 0.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
KI Live Video Conferences <= 5.5.15 - Unauthenticated Information Disclosure
Libro de Reclamaciones y Quejas <= 0.9 - Authenticated (Administrator+) SQL Injection
Premium Packages <= 6.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Persian Woocommerce SMS <= 7.0.10 - Authenticated (Shop manager+) SQL Injection
Bellows Accordion Menu <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
ShiftNav – Responsive Mobile Menu <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
HR Management Lite <= 3.7 - Cross-Site Request Forgery
Activity Plus Reloaded for BuddyPress <= 1.1.2 - Missing Authorization
WP Security Master <= 1.0.2 - Cross-Site Request Forgery
Frontend Dashboard <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
RTMKit Addons for Elementor <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accessibility Suite <= 4.19 - Missing Authorization
Calculated Fields Form <= 5.3.58 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.