Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
MasterStudy LMS <= 3.7.49 - Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion
WP User Manager – User Profile Builder & Membership <= 2.9.19 - Missing Authorization
10Web Booster <= 2.33.0 - Missing Authorization
Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Information Exposure
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization
The Post Grid <= 7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal
WPForms Lite 1.8.8.2 - 2.0.1.1 - Missing Authorization
WPeMatico RSS Feed Fetcher <= 2.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Events Manager <= 7.4.4 - Authenticated (Contributor+) Insecure Direct Object Reference
wpForo Forum <= 3.1.5 - Authenticated (Subscriber+) PHP Object Injection
Ninja Forms <= 3.15.3 - Unauthenticated PHP Object Injection
Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization to Authenticated (Subscriber+) Refund Requests
Ninja Forms <= 3.15.3 - Unauthenticated Stored Cross-Site Scripting
WPeMatico RSS Feed Fetcher <= 2.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
CMB2 <= 2.12.0 - Missing Authorization
Text Styler <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MasterStudy LMS <= 3.7.49 - Missing Authorization to Account Registration
MasterStudy LMS <= 3.7.49 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.