Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Simple calendar for Elementor <= 1.6.4 - Cross-Site Request Forgery
GutenKit <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
MPL-Publisher <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
User Registration <= 4.1.5 - Reflected Cross-Site Scripting
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Message Filter for Contact Form 7 <= 1.6.3.2 - Authenticated (Administrator+) SQL Injection
Frontend Dashboard <= 2.2.5 - Unauthenticated SQL Injection
Textmetrics <= 3.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
CM Answers <= 3.3.3 - Cross-Site Request Forgery
Booster for WooCommerce <= 7.2.5 - Reflected Cross-Site Scripting
Visual Composer Website Builder <= 45.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Popup Builder <= 1.1.35 - Authenticated (Subscriber+) Local File Inclusion
WordPress Events Calendar Registration & Tickets <= 2.6.0 - Reflected Cross-Site Scripting
wProject < 5.8.0 - Authenticated (Subscriber+) Privilege Escalation
Sirv <= 7.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload
Appointment Booking Calendar <= 1.3.92 - Missing Authorization
Hotel + Bed and Breakfast Booking Calendar Theme | Bellevue <= 4.2.2 - Missing Authorization
affiliate-toolkit <= 3.7.3 - Cross-Site Request Forgery
JNews <= 11.6.5 - Missing Authorization
wProject < 5.8.0 - Reflected Cross-Site Scripting
CM Ad Changer <= 2.0.5 - Cross-Site Request Forgery
Post in page for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.