Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Cars4Rent <= 1.4.2 - Unauthenticated PHP Object Injection
XmasB Quotes <= 1.6.1 - Reflected Cross-Site Scripting
B Slider <= 1.1.30 - Missing Authorization
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
Info Cards <= 1.0.11 - Missing Authorization
Theme Blvd Widget Areas <= 1.3.0 - Reflected Cross-Site Scripting
Blanka - One Page WordPress < 1.5 - Unauthenticated Local File Inclusion
Image Gallery block – Create and display photo gallery/photo album. <= 1.0.7 - Missing Authorization
All Bootstrap Blocks <= 1.3.28 - Missing Authorization
Captcha.eu <= 1.0.60 - Reflected Cross-Site Scripting
Golo <= 1.7.1 - Reflected Cross-Site Scripting
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
Javo Core <= 3.0.0.529 - Unauthenticated Arbitrary Content Deletion
Parallax Section block <= 1.0.9 - Missing Authorization
Chartbeat <= 2.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Yahoo! WebPlayer <= 2.0.6 - Reflected Cross-Site Scripting
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
WooCommerce Payment Gateway for Saferpay <= 0.4.9 - Unauthenticated Path Traversal
Uncode < 2.9.4.4 - Reflected Cross-Site Scripting
request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1
mitmproxy binaries embed a vulnerable python-hyper/h2 dependency
Craft CMS Potential Remote Code Execution via Twig SSTI
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.