Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersSMSA Shipping(official) <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Eventin <= 4.0.7 - Authenticated (Contributor+) Local File Inclusion
Themify Builder <= 7.6.3 - Authenticated (Contributor+) Local File Inclusion
Dynamic Product Category Grid, Slider for WooCommerce <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
WPLMS < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary File Upload
WPLMS < 1.9.9.5.2 - Authenticated (Instructor+) Arbitrary File Upload
WPLMS < 1.9.9.5.2 - Authenticated (Subscriber+) Arbitrary File Deletion
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary Directory Deletion
WPLMS < 1.9.9.5.3 - Authenticated (Subscriber+) Arbitrary File Upload
WPLMS < 1.9.9.5 - Authenticated (Student+) Remote Code Execution
WPLMS <= 1.9.9 - Unauthenticated Arbitrary File Upload
WPLMS < 1.9.9.5.2 - Authenticated (Student+) Arbitrary File Upload
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
Calculated Fields Form <= 5.2.63 - Denial of Service
Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files
AR for WordPress <= 7.3 - Missing Authorization to Unauthenticated Limited File Upload
Radio Player <= 2.0.83 - Unauthenticated Server-Side Request Forgery
Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.