Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersSimple WP Events <= 1.8.17 - Unauthenticated Arbitrary File Deletion
SEO Help <= 6.8.5 - Missing Authorization
Specia Companion <= 4.8 - Missing Authorization
CardGate Payments for WooCommerce <= 3.2.1 - Authenticated (Administrator+) SQL Injection
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Path Traversal
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection
Nearby Locations <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
EazyDocs <= 2.7.1 - Missing Authorization
Survey Maker <= 5.1.6.3 - Unauthenticated Authorization Bypass
Tutor LMS <= 3.4.0 - Authenticated (Subscriber+) HTML Injection
Flo Forms <= 1.0.43 - Missing Authorization
Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Spider Elements – Addons for Elementor <= 1.6.3 - Missing Authorization
Broadstreet <= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Popping Content Light <= 2.4 - Reflected Cross-Site Scripting
Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection
Hive Support <= 1.2.5 - Missing Authorization
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Hive Support <= 1.2.5 - Missing Authorization
WP-Recall <= 16.26.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.