Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCourse Booking System <= 6.1 - Missing Authorization
Social Intents <= 1.6.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
QR Code Tag for WC order emails <= 1.9.36 - Cross-Site Request Forgery
Gutenify <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Behance Portfolio Manager <= 1.7.5 - Authenticated (Administrator+) SQL Injection
Official CleverReach Plugin for WooCommerce <= 3.4.4 - Cross-Site Request Forgery to Settings Update
Privyr CRM <= 1.0.2 - Missing Authorization
teachPress <= 9.0.11 - Authenticated (Contributor+) SQL Injection
News Element Elementor Blog Magazine <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Falling things <= 1.08 - Authenticated (Editor+) SQL Injection
Rollbar <= 2.7.1 - Cross-Site Request Forgery
Libro de Reclamaciones y Quejas <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Jetpack Feedback Exporter <= 1.23 - Unauthenticated Sensitive Information Exposure
Administrator Z < 2026.05.10 - Cross-Site Request Forgery
LA-Studio Element Kit for Elementor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Doppler Forms <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
StaffList <= 3.2.6 - Unauthenticated Sensitive Information Exposure
FunnelCockpit <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
1-Click Backup & Restore Database <= 1.0.3 - Missing Authorization
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Local File Inclusion
URL Shortify <= 1.10.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
Sidebar Manager Light <= 1.1.8 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.