Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
WP JobHunt <= 7.1 - Unauthenticated Insecure Direct Object Reference
MapSVG <= 8.5.34 - Unauthenticated Arbitrary Shortcode Execution
EventON (Pro) <= 4.9.9 - Missing Authorization
Short URL <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
CSS3 Accordions for WordPress <= 3.0 - Missing Authorization
WordPress Events Calendar Registration & Tickets <= 2.6.0 - Unauthenticated PHP Object Injection
Broadstreet <= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Push notification for Mobile and Web app <= 2.0.3 - Missing Authorization
AlT Monitoring <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WHMpress <= 6.2-revision-9 - Authenticated (Contributor+) Local File Inclusion
Interview <= 1.01 - Authenticated (Contributor+) SQL Injection
BERTHA AI <= 1.12.11 - Missing Authorization
Wordpress Auto Spinner <= 3.25.0 - Missing Authorization
RS WP Book Showcase <= 6.7.70 - Unauthenticated Arbitrary Shortcode Execution
Wishlist <= 2.1.0 - Missing Authorization
Nasa Core < 6.4.4 - Authenticated (Contributor+) Local File Inclusion
Plant - Gardening & Houseplants WordPress Theme <= 1.0.0 - Unauthenticated Information Exposure
Wishlist <= 2.1.0 - Authenticated (Subscriber+) Information Exposure
Import Export For WooCommerce <= 1.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mortgage Calculator Estatik <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Video Player & FullScreen Video Background <= 2.4.1 - Authenticated (Administrator+) SQL Injection
Spare <= 1.7 - Cross-Site Request Forgery
WC Affiliate <= 2.16 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.