Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Dokan Pro <= 5.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
QuickCal <= 1.0.15 - Cross-Site Request Forgery to Privilege Escalation
HotStar – Multi-Purpose Business Theme <= 1.4 - Missing Authorization
AnyWhere Elementor Pro <= 2.29 - Missing Authorization
Pinterest Automatic Pin <= 4.18.2 - Missing Authorization
Apollo <= 3.6.3 - Authenticated (Contributor+) SQL Injection
CURCY <= 2.3.7 - Missing Authorization to Arbitrary Shortcode Execution
UberSlider < 2.6 - Authenticated (Contributor+) SQL Injection
ShayanWeb Admin FontChanger <= 1.9.1 - Cross-Site Request Forgery
ValidateCertify <= 1.6.4 - Cross-Site Request Forgery
Ninja Tables Pro <= 5.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Multimedia Responsive Carousel with Image Video Audio Support <= 2.6.0 - Authenticated (Contributor+) SQL Injection
WooCommerce POS <= 1.7.8 - Missing Authorization
Pixel WordPress Form BuilderPlugin & Autoresponder <= 1.0.3 - Cross-Site Request Forgery
ProfileGrid <= 5.9.5.1 - Missing Authorization
Printcart Web to Print Product Designer for WooCommerce <= 2.3.9 - Unauthenticated Arbitrary File Upload
Responsive HTML5 Audio Player PRO With Playlist <= 3.5.7 - Authenticated (Contributor+) SQL Injection
Acerola <= 1.6.5 - Missing Authorization
TI WooCommerce Wishlist <= 2.9.2 - Unauthenticated Arbitrary File Upload
WP Ultimate Tours Builder <= 1.055 - Cross-Site Request Forgery
UltraAddons Elementor Lite <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Salon Booking Pro <= 10.10.2 - Missing Authorization
SHOUT <= 3.5.3 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.