Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization
Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File Inclusion
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery
ShareThis Dashboard for Google Analytics <= 3.2.3 - Cross-Site Request Forgery
Wishlist <= 1.0.44 - Cross-Site Request Forgery
1 Click WordPress Migration <= 3.1.14 - Unauthenticated Information Disclsoure
Bookingor <= 2.0.1 - Missing Authorization
Slider a SlidersPack <= 2.3 - Authenticated (Contributor+) Local File Inclusion
Video & Photo Gallery for Ultimate Member <= 1.1.3 - Authenticated (Administrator+) SQL Injection
Easy Query – WP Query Builder <= 2.0.4 - Authenticated (Administrator+) SQL Injection
Motors <= 1.4.71 - Authenticated (Contributor+) Local File Inclusion
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Maps for WP <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced All in One Admin Search by WP Spotlight <= 1.1.1 - Cross-Site Request Forgery
uListing <= 2.1.9 - Authenticated (Administrator+) SQL Injection
Order Delivery Date for WooCommerce 2.0 - 12.3.1- Unauthenticated Arbitrary Options Update
StaffList <= 3.2.6 - Missing Authorization
WP Genealogy – Your Family History Website <= 0.1.9 - Missing Authorization
eaSYNC <= 1.3.19 - Missing Authorization
Gallery Blocks with Lightbox <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.