Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersAnalytify <= 5.4.3 - Missing Authorization
Magical Addons For Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Shortcodes <= 1.7.2 - Reflected Cross-Site Scripting
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
PostX <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Z-Downloads <= 1.11.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection
WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) SQL Injection via orderby
Filebird <= 6.3.2 - Missing Authorization
Themesflat Addons For Elementor <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 5.0.8 - Missing Authorization
WP Mailster <= 1.8.16.0 - Missing Authorization
Borderless <= 1.5.8 - Authenticated (Editor+) Stored Cross-Site Scripting
WordPress Page Builder – Zion Builder <= 3.6.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
CMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Beaver Builder <= 2.8.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Form Data Collector <= 2.2.3 - Reflected Cross-Site Scripting
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Connexion Logs <= 3.0.2 - Authenticated (Admin+) SQL Injection
WP Mailster <= 1.8.16.0 - Missing Authorization
Revy <= 1.18 - Unauthenticated Arbitrary File Upload
NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection
WPCasa <= 1.2.13 - Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.