Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersNitan <= 2.9 - Unauthenticated Local File Inclusion
Grill and Chow <= 1.6 - Unauthenticated Local File Inclusion
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Widget Logic <= 6.0.5 - Authenticated (Contributor+) Remote Code Execution
Fitrush <= 1.3.4 - Unauthenticated Local File Inclusion
Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery <= 1.0.12 - Unauthenticated Directory Traversal
TinySalt < 3.10.0 - Unauthenticated Local File Inclusion
CLEVER <= 2.6 - Unauthenticated Arbitrary File Download
Easy Contact Form Lite <= 1.1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediClinic <= 2.1 - Unauthenticated Local File Inclusion
Avaz <= 2.8 - Unauthenticated Local File Inclusion
CozyStay < 1.7.1 - Unauthenticated PHP Object Injection
SNS Anton <= 4.1 - Unauthenticated Local File Inclusion
Membership For WooCommerce <= 2.8.1 - Missing Authorization
Themify Edmin <= 2.0.0 - Authenticated (Contributor+) PHP Object Injection
GiftXtore <= 1.7.5 - Unauthenticated Local File Inclusion
TinySalt < 3.10.0 - Unauthenticated PHP Object Injection
GrandPrix <= 1.6 - Unauthenticated Local File Inclusion
Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
CraftXtore <= 1.7 - Unauthenticated Local File Inclusion
Petito <= 1.6.4 - Unauthenticated Local File Inclusion
WordPress Photo Gallery <= 1.1.0 - Reflected Cross-Site Scripting
User Registration Aide <= 1.5.3.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.