Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCP Contact Form with Paypal <= 1.3.61 - Authenticated (Contributor+) SQL Injection
Invetex <= 2.18 - Unauthenticated Local File Inclusion
G5Plus April <= 6.8 - Missing Authorization
RT-Theme 18 | Extensions <= 2.5 - Unauthenticated Information Exposure
Meals & Wheels <= 1.1.12 - Unauthenticated Local File Inclusion
VW Pet Shop <= 1.4.7 - Missing Authorization
MoneyFlow <= 1.0 - Unauthenticated Local File Inclusion
LMS Elementor Pro <= 1.0.4 - Unauthenticated Privilege Escalation
Green Thumb <= 1.1.12 - Unauthenticated Local File Inclusion
The Tribal <= 1.3.4 - Unauthenticated Information Exposure
N7 | Golf Club Sports & Events <= 2.16.0 - Unauthenticated Local File Inclusion
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
Avventure <= 1.1.12 - Unauthenticated Local File Inclusion
Maxify <= 1.0.16 - Unauthenticated Local File Inclusion
Gridiron <= 1.0.14 - Unauthenticated Local File Inclusion
VW Portfolio <= 1.3.3 - Missing Authorization
Equadio <= 1.1.3 - Unauthenticated Local File Inclusion
MIPL WC Multisite Sync <= 1.4.4 - Missing Authorization
Astra Bulk Edit <= 1.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accept PayPal Payments using Contact Form 7 <= 4.0.5 - Missing Authorization
UiCore Elements <= 1.3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
VW Education Lite <= 2.2.0 - Missing Authorization
WowOptin <= 1.4.37 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.