Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAcademy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon
Enfold <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
PowerPress Podcasting <= 11.13.12 - Cross-Site Request Forgery
Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
ACF to REST API <= 3.3.4 - Unauthenticated Information Exposure
KiotViet Sync <= 1.8.5 - Missing Authorization
Whydonate <= 4.0.15 - Missing Authorization
Rocket <= 3.19.4 - Authenticated (Author+) Stored Cross-Site Scripting
WPC Countdown Timer for WooCommerce <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pondol BBS <= 1.1.8.4 - Authenticated (Editor+) Stored Cross-Site Scripting
ListingPro <= 2.9.9 - Missing Authorization
ListingPro Lead Form <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
BuddyForms <= 2.9.0 - Missing Authorization
Sendle Shipping <= 6.02 - Missing Authorization
Attesa Extra <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Raychat <= 2.2.1 - Cross-Site Request Forgery
Business Directory <= 6.4.18 - Missing Authorization
ListingPro <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
WebinarPress <= 1.33.28 - Missing Authorization
百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.1.4 - Missing Authorization
Headline Analyzer <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ListingPro Lead Form <= 1.0.2 - Missing Authorization
Rehub < 19.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.