Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAdd Polylang support for Customizer <= 1.4.5 - Cross-Site Request Forgery
Oneline Lite <= 6.6 - Missing Authorization
CTX Feed <= 6.6.18 - Missing Authorization
MapIt <= 3.0.3 - Missing Authorization
Apimo Connector <= 2.6.4 - Missing Authorization
Wanderland <= 1.5 - Missing Authorization
Prowess <= 1.8.1 - Missing Authorization
Don Peppe <= 1.3 - Missing Authorization
Smart Auto Upload Images – Import External Images <= 1.2.2 - Authenticated (Contributor+) Server-Side Request Forgery
Verdure <= 1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Sweet Jane <= 1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Innovio <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Grand Blog < 3.1.5 - Unauthenticated Server-Side Request Forgery
Dolcino <= 1.6 - Authenticated (subscriber+) Insecure Direct Object Reference
Overton <= 1.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Five Star Restaurant Reservations <= 2.7.4 - Unauthenticated Insecure Direct Object Reference
VidMov <= 2.3.8 - Authenticated (Subscriber+) Path Traversal
Justicia <= 1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Tutor LMS <= 3.9.4 - Authenticated (Instructor+) Insecure Direct Object Reference
PhotoMe < 5.7.2 - Unauthenticated Server-Side Request Forgery
Roam <= 2.1.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Branda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover
WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.