Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Booqable Rental <= 2.4.25 - Cross-Site Request Forgery
WP Time Slots Booking Form <= 1.2.30 - Cross-Site Request Forgery
WebHotelier <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slack Notifications by dorzki <= 2.0.7 - Missing Authorization
BRW <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-CRM System <= 3.4.2 - Missing Authorization
BlockStrap Page Builder - Bootstrap Blocks <= 0.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
KI Live Video Conferences <= 5.5.15 - Unauthenticated Information Disclosure
Libro de Reclamaciones y Quejas <= 0.9 - Authenticated (Administrator+) SQL Injection
Premium Packages <= 6.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Persian Woocommerce SMS <= 7.0.10 - Authenticated (Shop manager+) SQL Injection
Bellows Accordion Menu <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
ShiftNav – Responsive Mobile Menu <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
HR Management Lite <= 3.7 - Cross-Site Request Forgery
Activity Plus Reloaded for BuddyPress <= 1.1.2 - Missing Authorization
WP Security Master <= 1.0.2 - Cross-Site Request Forgery
Frontend Dashboard <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
RTMKit Addons for Elementor <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Accessibility Suite <= 4.19 - Missing Authorization
Calculated Fields Form <= 5.3.58 - Cross-Site Request Forgery
Bang tinh vay <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Gravity Forms Salesforce <= 1.4.7 - Open Redirect
GPP Slideshow <= 1.3.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.