Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Missing Authorization
Campress <= 1.35 - Unauthenticated Local File Inclusion
Give – Divi Donation Modules <= 2.0.0 - Sensitive Information Dislcosure
LTL Freight Quotes – FreightQuote Edition <= 2.3.11 - Missing Authorization
Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution
LTL Freight Quotes – Worldwide Express Edition <= 5.0.20 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Pallet Packaging for WooCommerce <= 1.1.15 - Missing Authorization
Listivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting
LTL Freight Quotes – FreightQuote Edition <= 2.3.11 - Unauthenticated SQL Injection
Puzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget
LTL Freight Quotes – Worldwide Express Edition <= 5.0.21 - Reflected Cross-Site Scripting
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Reflected Cross-Site Scripting
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
GeoNetwork search end-point information disclosure in response headers
Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter
Small Package Quotes – Purolator Edition <= 3.6.4 - Unauthenticated SQL Injection
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Unauthenticated SQL Injection
WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion
Book a Room <= 2.9 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.