Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersBooking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via Shortcode
Squirrly SEO - Advanced Pack < 2.4.02 - Authenticated(Administrator+) SQL Injection
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
MF Gig Calendar <=1.2.1 - Authenticated(Contributor+) SQL Injection
Login Lockdown – Protect Login Form <= 2.06 - Authenticated(Administrator+) SQL Injection
Pre* Party Resource Hints < 1.8.19 - Authenticated(Administrator+) SQL Injection
JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid
Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection
Mail logging – WP Mail Catcher <= 2.1.3 - Authenticated(Administrator+) SQL Injection
404 Solution <= 2.34.0 - Authenticated(Administrator+) SQL Injection
E2Pdf <= 1.20.23 - Authenticated(Administrator+) SQL Injection
Clockwork SMS Notfications <= 3.0.4 - Authenticated(Administrator+) SQL Injection
BackWPup <= 4.0.3 - Sensitive Information Exposure
Debug Log Manager <= 2.2.2 - Directory Listing to Sensitive Information Disclosure
WP Project Manager <= 2.6.7 - Missing Authorization
Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure
ArtPlacer Widget <= 2.20.6 - Authenticated (Editor+) SQL Injection
WP Project Manager <= 2.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
PayHere Payment Gateway <= 2.2.11 - Information Disclosure via Log Files
WP STAGING WordPress Backup Plugin Free <= 3.1.2 and Pro <= 5.1.2 - Sensitive Information Exposure
Burst Statistics – Privacy-Friendly Analytics for WordPress 1.4.0 to 1.4.6.1 - Unauthenticated SQL Injection
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.