Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
teachPress <= 9.0.11 - Authenticated (Contributor+) SQL Injection
News Element Elementor Blog Magazine <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Falling things <= 1.08 - Authenticated (Editor+) SQL Injection
Rollbar <= 2.7.1 - Cross-Site Request Forgery
Libro de Reclamaciones y Quejas <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Jetpack Feedback Exporter <= 1.23 - Unauthenticated Sensitive Information Exposure
Administrator Z < 2026.05.10 - Cross-Site Request Forgery
LA-Studio Element Kit for Elementor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Doppler Forms <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
StaffList <= 3.2.6 - Unauthenticated Sensitive Information Exposure
FunnelCockpit <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
1-Click Backup & Restore Database <= 1.0.3 - Missing Authorization
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Local File Inclusion
URL Shortify <= 1.10.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
Sidebar Manager Light <= 1.1.8 - Cross-Site Request Forgery
onOffice for WP-Websites <= 6.5 - Authenticated (Administrator+) SQL Injection
VG WooCarousel <= 1.3 - Authenticated (Contributor+) Local File Inclusion
DyaPress ERP/CRM <= 18.0.2.0 - Unauthenticated Local File Inclusion
Arkhe Blocks <= 2.27.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Local File Inclusion
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.5 - Missing Authorization
Ai Image Alt Text Generator for WP <= 1.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.