Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,642
Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save()
Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode
PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload
Google Analytics Events <= 2.8.2 - Unauthenticated Information Exposure
Happy Addons for Elementor <= 3.20.3 - Missing Authorization
Custom Sidebars by ProteusThemes <= 1.0.3 - Cross-Site Request Forgery
Image Cleanup <= 1.9.2 - Missing Authorization
WPForms Google Sheet Connector <= 4.0.0 - Missing Authorization
AdForest <= 6.0.11 - Missing Authorization
User Spam Remover <= 1.1 - Unauthenticated Information Exposure
Premium Addons for Elementor <= 4.11.53 - Unauthenticated Information Exposure
SMTP Mail <= 1.3.49 - Cross-Site Request Forgery
ERP <= 1.16.7 - Missing Authorization
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Hype <= 1.0.5 - Missing Authorization
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Information Exposure
Xagio SEO <= 7.1.0.37 - Missing Authorization
Media Library Downloader <= 1.4.0 - Cross-Site Request Forgery
WooCommerce Payment Gateway – Paysera <= 3.10.0 - Missing Authorization
WpEvently <= 5.0.4 - Missing Authorization
alexusmai laravel-file-manager is vulnerable to Directory Traversal
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded
mcp-server-kubernetes has potential security issue in exec_in_pod tool
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.