Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Gravity Forms: Multiple Form Instances <= 1.1.1 - Unauthenticated Full Path Disclosure
Featured Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Images Upload
Undici vulnerable to data leak when using response.arrayBuffer()
UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Malicious package. Exfiltrated secrets to a target server.
Undertow Missing Release of Memory after Effective Lifetime vulnerability
Woocommerce OpenPos <= 7.0.1 - Missing Authorization to Information Exposure
Send email only on Reply to My Comment <= 1.0.6 - Reflected Cross-Site Scripting
Internal Link Juicer: SEO Auto Linker for WordPress <= 2.24.3 - Cross-Site Request Forgery
ARForms Form Builder <= 1.6.7 - Reflected Cross-Site Scripting
Point <= 1.1 - Cross-Site Request Forgery
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Web Directory Free <= 1.7.1 - Reflected Cross-Site Scripting
SociallyViral <= 1.0.10 - Cross-Site Request Forgery
Gum Elementor Addon <= 1.3.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
User Activity Log Pro <= 2.3.4 - Missing Authorization
Seraphinite Accelerator Premium <= 2.21.13 - Cross-Site Request Forgery to Arbitrary File Deletion
SmartMag < 10.1.0 - Unauthenticated Sensitive Information Exposure via Log Files
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Reflected Cross-Site Scripting
Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery
BuddyBoss Theme <= 2.4.61 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.