Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersKalium <= 3.18.3 - Cross-Site Request Forgery
Templatera <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
StoryMap <= 2.1 - Cross-Site Request Forgery
DigitalOcean Spaces Sync <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Unicamp <= 2.6.3 - Unauthenticated Local File Inclusion
Modernize <= 3.4.0 - Missing Authorization
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload
CM On Demand Search And Replace <= 1.5.2 - Cross-Site Request Forgery
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization
JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion
Shortcode Redirect <= 1.0.02 - Authenticated (Contributor+) Stored Cross-Site Scripting
Webba Booking <= 6.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
JetProductGallery <= 2.2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Modernize <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Makeaholic <= 1.8.4 - Unauthenticated Local File Inclusion
Visual Composer Website Builder <= 45.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
oik <= 4.15.2 - Reflected Cross-Site Scripting
Print My Blog <= 3.27.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
WP Pipes <= 1.4.3 - Reflected Cross-Site Scripting
WPDM – Premium Packages <= 6.0.2 - Cross-Site Request Forgery
Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download
Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.