Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filtersLTL Freight Quotes – Worldwide Express Edition <= 5.0.20 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Pallet Packaging for WooCommerce <= 1.1.15 - Missing Authorization
Listivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting
LTL Freight Quotes – FreightQuote Edition <= 2.3.11 - Unauthenticated SQL Injection
Puzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget
LTL Freight Quotes – Worldwide Express Edition <= 5.0.21 - Reflected Cross-Site Scripting
Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Reflected Cross-Site Scripting
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter
Small Package Quotes – Purolator Edition <= 3.6.4 - Unauthenticated SQL Injection
LTL Freight Quotes – Unishippers Edition <= 2.5.8 - Unauthenticated SQL Injection
WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion
Book a Room <= 2.9 - Cross-Site Request Forgery to Settings Update
ShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL Injection
Ebook Downloader <= 1.0 - Unauthenticated SQL Injection
Rise Blocks – A Complete Gutenberg Page Builder <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleTag Parameter
FuseDesk <= 6.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.