Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCaldera SMTP Mailer <= 1.0.1 - Missing Authorization
Wr Age Verification <= 2.0.0 - Unauthenticated SQL Injection
Flash News / Post (Responsive) <= 4.1 - Cross-Site Request Forgery to Privilege Escalation
Saksh Escrow System <= 2.4 - Authenticated (Subscriber+) SQL Injection
Mimoos <= 1.2 - Authenticated (Subscriber+) SQL Injection
Dreamfox Media Payment gateway per Product for Woocommerce <= 3.5.8 - Missing Authorization
Wovax IDX <= 1.2.2 - Missing Authorization to Privilege Escalation
Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection
XML Multilanguage Sitemap Generator <= 2.0.6 - Missing Authorization
Wr Age Verification <= 2.0.0 - Authenticated (Subscriber+) SQL Injection
Better WP Login Page <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
LaunchPage.app Importer <= 1.1 - Unauthenticated SQL Injection
Critical Site Intel <= 1.0 - Unauthenticated SQL Injection
Bootstrap Buttons <= 1.2 - Reflected Cross-Site Scripting
WordPress CRM Plugin – WP-CRM System <= 3.2.9.1 - Missing Authorization
Advanced Data Table For Elementor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
eTemplates <= 0.2.1 - Unauthenticated SQL Injection
Job Board Manager <= 2.1.60 - Missing Authorization
Leader <= 2.6.1 - Missing Authorization
Contact Form, Survey & Form Builder – MightyForms <= 1.3.9 - Missing Authorization
TSB Occasion Editor <= 1.2.1 - Authenticated (Subscriber+) SQL Injection
PowerFormBuilder <= 1.0.6 - Authenticated (Subscriber+) SQL Injection
Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.