Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersWPO365 <= 40.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Anything Order by Terms <= 1.4.0 - Missing Authorization
Media Library File Size <= 1.6.7 - Missing Authorization
Movie Booking <= 1.1.5 - Unauthenticated Arbitrary File Deletion
Ultra Portfolio <= 6.7 - Authenticated (Subscriber+) SQL Injection
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
Paid Downloads <= 3.15 - Unauthenticated SQL Injection
Lawyer Directory <= 1.3.3 - Authenticated (Subscriber+) Privilege Escalation
WorkScout-Core <= 1.7.06 - Unauthenticated Stored Cross-Site Scripting
Beaver Builder <= 2.9.4.1 - Authenticated (Contributor+) Remote Code Execution
eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
Textmetrics <= 3.6.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
BackItUp <= 2.1.0 - Missing Authorization
User Registration <= 4.4.6 - Missing Authorization
WP Docs <= 2.2.8 - Missing Authorization
JobWP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting
B Accordion <= 2.0.2 - Authenticated (Contributor+) Information Exposure
Tabby Checkout <= 5.8.4 - Unauthenticated Information Exposure
Nelio Content <= 4.2.0 - Authenticated (Contributor+) SQL Injection
WorkScout <= 4.1.07 - Unauthenticated Stored Cross-Site Scripting
Extend Link <= 2.0.0 - Authenticated (Contributor+) Server-Side Request Forgery
iNET Webkit <= 1.2.4 - Missing Authorization
MyHome Core <= 4.1.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.