Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersCaptcha Code <= 3.32 - Unauthenticated Login Captcha Protection Bypass
Team Showcase Supreme <= 9.2 - Unauthenticated Information Exposure
Safe SVG <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Netgsm <= 2.10.0 - Missing Authorization
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.9 - Authenticated (Author+) SQL Injection
Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
Advanced Contact form 7 DB <= 2.1.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode
Ultra Addons for Contact Form 7 <= 3.5.50 - Authenticated (Contributor+) Stored Cross-Site Scripting
MasterStudy LMS <= 3.7.49 - Unauthenticated (Subscriber+) Unauthorized Course Enrollment
MasterStudy LMS <= 3.7.49 - Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization
wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion
WP User Manager – User Profile Builder & Membership <= 2.9.19 - Missing Authorization
10Web Booster <= 2.33.0 - Missing Authorization
Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Information Exposure
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.71 - Missing Authorization
The Post Grid <= 7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal
WPForms Lite 1.8.8.2 - 2.0.1.1 - Missing Authorization
WPeMatico RSS Feed Fetcher <= 2.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Events Manager <= 7.4.4 - Authenticated (Contributor+) Insecure Direct Object Reference
wpForo Forum <= 3.1.5 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.