Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filtersInstant VA <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Remote Code Execution
Gravity Forms <= 2.9.28.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Form Title
Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass
LuxeDrive <= 1.0 - Unauthenticated Local File Inclusion
Deston <= 1.0 - Unauthenticated Local File Inclusion
MultiOffice <= 1.2 - Unauthenticated Local File Inclusion
WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload
PitchPrint <= 11.1.2 - Unauthenticated Arbitrary File Deletion
Rosebud - Flower Shop and Florist WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
Belfort <= 1.0 - Unauthenticated Local File Inclusion
WordPress <= 6.9.1 - Unauthenticated Blind Server-Side Request Forgery via XML-RPC Pingback Discovery
Emaurri <= 1.0.1 - Unauthenticated Local File Inclusion
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Amfissa <= 1.1 - Unauthenticated Local File Inclusion
The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import
Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion
Easy PHP Settings <= 1.0.4 - Authenticated (Administrator+) PHP Code Injection via 'wp_memory_limit' Setting
Wizor's <= 2.12 - Unauthenticated Local File Inclusion
Amoli <= 1.0 - Unauthenticated Local File Inclusion
Roisin <= 1.2.1 - Unauthenticated Local File Inclusion
VegaDays - Vegetarian Food Festival & Eco Event WordPress Theme <= 1.2.0 - Unauthenticated Local File Inclusion
Unica - Event Planning & Wedding WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.