Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersResurs <= 1.3 - Unauthenticated Local File Inclusion
Roneous - Creative Multi-Purpose WordPress Theme <= 2.1.5 - Unauthenticated Local File Inclusion
Tipsy <= 1.1 - Unauthenticated Local File Inclusion
ITactics <= 1.0 - Unauthenticated Local File Inclusion
Grecko <= 5.17 - Unauthenticated Local File Inclusion
Eventicity <= 1.5 - Unauthenticated Local File Inclusion
Gamic <= 1.15 - Unauthenticated Local File Inclusion
Gita <= 1.11 - Unauthenticated Local File Inclusion
Orpheus <= 1.3 - Unauthenticated Local File Inclusion
VikBooking Hotel Booking Engine & PMS <= 1.8.10 - Unauthenticated Arbitrary File Deletion
Choreo <= 1.6 - Unauthenticated Local File Inclusion
WineShop - Food & Wine Store WordPress Theme <= 3.17 - Unauthenticated Local File Inclusion
Line Agency <= 1.3.1 - Unauthenticated Local File Inclusion
Skyward <= 1.10 - Unauthenticated Local File Inclusion
Truemag <= 4.3.14.2 - Unauthenticated Local File Inclusion
Printo <= 1.11 - Unauthenticated Local File Inclusion
Granola <= 1.13 - Unauthenticated Local File Inclusion
Spike <= 1.2 - Unauthenticated Local File Inclusion
Etude <= 1.6 - Unauthenticated Local File Inclusion
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion
Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection
Xpro Elementor Addons - Pro <= 1.4.7 - Authenticated (Contributor+) Arbitrary File Read via Draw SVG
WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.