Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filtersKnowledge Base <= 2.9 - Authenticated (Subscriber+) PHP Object Injection
Single Property <= 2.8 - Authenticated (Subscriber+) PHP Object Injection
The Barber Shop <= 1.9 - Unauthenticated PHP Object Injection
Lagom <= 2.0 - Unauthenticated PHP Object Injection
The Hospital <= 1.8.1 - Unauthenticated PHP Object Injection
Zuut <= 1.4.2 - Unauthenticated PHP Object Injection
LTL Freight Quotes - TQL Edition <= 1.2.6 - Authenticated (Administrator+) PHP Object Injection
LTL Freight Quotes – Daylight Edition <= 2.2.7 - Authenticated (Administrator+) PHP Object Injection
immonex Kickstart <= 1.11.6 - Authenticated (Contributor+) Local File Inclusion
LTL Freight Quotes – Day & Ross Edition <= 2.1.11 - Authenticated (Administrator+) PHP Object Injection
Quiz And Survey Master <= 10.2.5 - Unauthenticated PHP Object Injection
Client Invoicing by Sprout Invoices <= 20.8.7 - Unauthenticated PHP Object Injection
Constant Contact for WordPress <= 4.1.1 - Unauthenticated PHP Object Injection
Creatify <= 1.5 - Unauthenticated PHP Object Injection
Finag <= 1.5.0 - Unauthenticated PHP Object Injection
Ninja Forms <= 3.11.0 - Unauthenticated PHP Object Injection
ThemeREX Addons <= 2.36.1.1 - Unauthenticated PHP Object Injection
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection
Small Package Quotes – USPS Edition <= 1.3.9 - Authenticated (Administrator+) PHP Object Injection
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Cars4Rent <= 1.4.2 - Unauthenticated PHP Object Injection
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
WP Ticket Customer Service Software & Support Ticket System <= 6.0.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.