Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersLambertGroup - AllInOne - Content Slider <= 3.8 - Authenticated (Contributor+) SQL Injection
Page Manager for Elementor <= 2.0.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Download Manager <= 3.3.25 - Unauthenticated Sensitive Information Exposure
LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Authenticated (Contributor+) SQL Injection
AllInOne - Banner Rotator <= 3.8 - Authenticated (Contributor+) SQL Injection
CoSchedule <= 3.3.11 - Unauthenticated Sensitive Information Exposure
FoodBook <= 4.7.6 - Unauthenticated Sensitive Information Exposure
PGS Core <= 5.9.0 - Authenticated (Contributor+) SQL Injection
Stackable <= 3.18.1 - Authenticated (Contributor+) Sensitive Information Exposure
The Tribal <= 1.3.3 - Unauthenticated Sensitive Information Exposure
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Authenticated (Contributor+) SQL Injection
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
Email marketing for WordPress by GetResponse Official <= 1.5.3 - Authenticated (Subscriber+) Information Exposure
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection
HieCOR Payment Gateway Plugin <= 1.5.11 - Unauthenticated SQL Injection
Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure
Quiz Maker <= 6.7.0.65 - Unauthenticated Sensitive Information Exposure
Adverts <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Attractive Donations System < 1.29 - Cross-Site Request Forgery
Envíos Coordinadora Woocommerce <= 1.1.31 - Unauthenticated Sensitive Information Exposure
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure
Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure
WordPress <= 6.8.2 - Authenticated (Contributor+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.