Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersAnimation Addons for Elementor <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Popup Like box <= 3.7.7 - Missing Authorization
Make My Trivia <= 1.1.0 - Missing Authorization
ShopWP <= 5.2.4 - Missing Authorization
Payment Gateway Pix For GiveWP <= 2.2.3 - Missing Authorization
Medilazar Core < 1.4.7 - Authenticated (Contributor+) Local File Inclusion
Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_code
WP Mail Logging <= 1.15.0 - Unauthenticated PHP Object Injection via Email Log Message Field
Happy Baby <= 1.2.12 - Unauthenticated Local File Inclusion
Peter Mason <= 1.4.5 - Unauthenticated Local File Inclusion
Beacon <= 2.24 - Unauthenticated Local File Inclusion
Dixon <= 1.4.2.1 - Unauthenticated Local File Inclusion
M.Williamson <= 1.2.11 - Unauthenticated Local File Inclusion
Police Department <= 2.17 - Unauthenticated Local File Inclusion
Bassein <= 1.0.15 - Unauthenticated Local File Inclusion
Mahogany <= 2.9 - Unauthenticated Local File Inclusion
MAIO – The new AI GEO / SEO tool <= 7.0.11 - Missing Authorization
Edge Decor <= 2.2 - Unauthenticated Local File Inclusion
AI Workflow Automation <= 2.0.3 - Missing Authorization
Vapester <= 1.1.10 - Unauthenticated Local File Inclusion
Admin and Site Enhancements (ASE) <= 8.4.0 - Missing Authorization
Aqualots <= 1.1.6 - Unauthenticated Local File Inclusion
Bazinga <= 1.1.9 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.