Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersNeuronet < 1.14.0 - Unauthenticated Local File Inclusion
Search & Filter <= 1.2.17 - Cross-Site Request Forgery
Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie
Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Betheme <= 28.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
Progress Planner <= 1.8.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
Sonaar <= 4.27.4 - Authenticated (Subscriber+) Privilege Escalation
Sonaar <= 4.27.4 - Reflected Cross-Site Scripting
MSN Partner Hub <= 2.8.7 - Missing Authorization
MapSVG <= 8.7.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Flatsome <= 3.20.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Table Block by RioVizual <= 3.0.1 - Missing Authorization
Testimonial Slider <= 2.0.15 - Missing Authorization
Nelio Content <= 4.0.5 - Missing Authorization
SEO Meta Description Updater <= 1.2.0 - Missing Authorization
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Conversios.io <= 7.2.13 - Missing Authorization
IgnitionDeck <= 2.0.10 - Missing Authorization
Export Categories <= 1.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.