Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersHotel Listing <= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation
Famita <= 1.54 - Unauthenticated Local File Inclusion
Ray Enterprise Translation <= 1.7.1 - Unauthenticated Local File Inclusion
Aromatica <= 1.8 - Unauthenticated Local File Inclusion
Epic Review <= 1.0.2 - Reflected Cross-Site Scripting
Ziston < 1.4.5 - Unauthenticated Local File Inclusion
TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter
Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode
Related Posts Lite <= 1.12 - Cross-Site Request Forgery
Printeers Print & Ship <= 1.17.0 - Missing Authorization
YayPricing <= 3.5.3 - Missing Authorization
Nifty Backups <= 1.08 - Reflected Cross-Site Scripting
Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion
Blog Designer PRO <= 3.4.8 - Missing Authorization
MultiSite Clone Duplicator <= 1.5.3 - Reflected Cross-Site Scripting
Cookie Notice & Consent <= 1.6.4 - Unauthenticated Stored Cross-Site Scripting
Sunshine Photo Cart <= 3.5.3 - Missing Authorization
PostX <= 4.1.35 - Authenticated (Editor+) Privilege Escalation
Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets
List Subpages <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Ultimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgery
iATS Online Forms <= 1.2 - Authenticated (Contributor+) SQL Injection via order Parameter
OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.