Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersGetty Images <= 4.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Chocolate House <= 1.1.5 - Missing Authorization
Auto x LINE <= 1.0.0 - Missing Authorization
eCommerce <= 3.15.1 - Cross-Site Request Forgery to Coupon Deletion
Grand Blog <= 3.1 - Cross-Site Request Forgery
WP Last Modified Info <= 1.9.5 - Insecure Direct Object Reference to Authenticated (Author+) Post Metadata Modification
PowerPress Podcasting <= 11.15.13 - Authenticated (Author+) Stored Cross-Site Scripting
MailerPress <= 1.4.2 - Authenticated (Contributor+) Server-Side Request Forgery
Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mogi <= 1.2.3 - Missing Authorization
WPSchoolPress <= 2.2.36 - Missing Authorization
Powerpack for LearnDash <= 1.2.0 - Unauthenticated Arbitrary Options Update
Share This Image <= 2.14 - Unauthenticated Server-Side Request Forgery
Grand Portfolio <= 3.3 - Cross-Site Request Forgery
Grand Car Rental <= 3.6.9 - Cross-Site Request Forgery
Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header
Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter
Uminex <= 1.0.9 - Unauthenticated Arbitrary Shortcode Execution
Login with Salesforce <= 1.0.2 - Authentication Bypass
Passster <= 4.2.25 - Missing Authorization
Ashe <= 2.267 - Missing Authorization
Custom Query Blocks <= 5.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
DukaMarket <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.