Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersaThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
PGS Core <= 5.9.0 - Authenticated (Contributor+) SQL Injection
Netgsm <= 2.9.71 - Missing Authorization
HT Feed <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Subscribe to Download <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
MWW Disclaimer Buttons <= 3.41 - Authenticated (Administrator+) Stored Cross-Site Scripting
Lenix scss compiler <= 1.2 - Cross-Site Request Forgery
Nota Fiscal Eletrônica WooCommerce <= 3.4.0.9 - Missing Authorization
Stackable <= 3.18.1 - Authenticated (Contributor+) Sensitive Information Exposure
The Tribal <= 1.3.3 - Unauthenticated Sensitive Information Exposure
W3SCloud Contact Form 7 to Zoho CRM <= 3.0 - Cross-Site Request Forgery
Map Categories to Pages <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
kontur Admin Style <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
SKT Blocks <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
EmailKit <= 1.6.0 - Missing Authorization to Authenticated (Author+) Arbitrary Content Deletion
Nota Fiscal Eletrônica WooCommerce <= 3.4.0.9 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Subscribe To Unlock <= 1.1.5 - Missing Authorization
Vehica Core <= 1.0.100 - Cross-Site Request Forgery
Testimonial Slider <= 3.5.8.6 - Authenticated (Contributor+) Local File Inclusion
TheGem <= 5.10.5 - Missing Authorization
WooEvents <= 4.1.7 - Missing Authorization
Groovy Menu <= 1.4.5 - Cross-Site Request Forgery
WP Ticket Customer Service Software & Support Ticket System <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.