Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Maps <= 4.9.6 - Authenticated (Subscriber+) Local File Inclusion
YMC Filter <= 3.12.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Statistics <= 14.16.9 - Authenticated (Subscriber+) Information Exposure
Newsletters <= 4.15 - Unauthenticated API Authorization Bypass via Type Juggling
Cancel Order & Request Woocommerce <= 1.3.4.33 - Missing Authorization
Essential Blocks <= 6.3.0 - Unauthenticated Information Exposure
Google Authenticator <= 0.55 - Cross-Site Request Forgery
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting
BNE Testimonials <= 2.0.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Search Lite <= 4.14.4 - Unauthenticated PHP Object Injection
MStore API <= 4.20.0 - Missing Authorization
Essential Blocks <= 6.3.0 - Unauthenticated Information Exposure
Online Scheduling and Appointment Booking System – Bookly < 27.8 - Unauthenticated SQL Injection
Remote API <= 0.2 - Unauthenticated PHP Object Injection
Photo Album Plus <= 9.2.07.1 - Unauthenticated Export ZIP File Deletion
Events Manager <= 2.2.4 - Insecure Direct Object Reference to Unauthenticated Payment Bypass
Link Library <= 7.9.3 - Reflected Cross-Site Scripting
MStore API <= 4.20.0 - Missing Authorization
Maps Pro <= 6.1.2 - Unauthenticated Local File Inclusion
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Contact Message and User Data Disclosure
Events Manager <= 2.2.4 - Authenticated (Subscriber+) Payment Bypass
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
Estatik <= 4.3.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.