Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
WordPress REST API Authentication <= 3.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting
Integration for WooCommerce and QuickBooks <= 1.3.1 - Cross-Site Request Forgery
WP-Advanced-Search <= 3.3.9.3 - Authenticated (Admin+) Arbitrary File Upload
HelpGent <= 2.2.4 - Unauthenticated PHP Object Injection
Editor Wysiwyg Background Color <= 1.0 - Missing Authorization
Bulk Term Editor <= 1.1.4 - Cross-Site Request Forgery
WP Simple Booking Calendar <= 2.0.13 - Missing Authorization
Xelion Webchat <= 9.1.0 - Authenticated (Subscriber+) Privilege Escalation
WooCommerce Social Login <= 2.8.2 - Cross-Site Request Forgery
Administrator Z <= 2025.03.28 - Authenticated (Admin+) Directory Traversal
ElementsReady Addons for Elementor <= 6.6.2 - Cross-Site Request Forgery
Church Admin <= 5.0.9 - Unauthenticated Information Disclosure
BMA Lite <= 1.4.2 - Authenticated (Administrator+) SQL Injection
WPCOM Member <= 1.7.7 - Authenticated (Contributor+) Local File Inclusion
Subscribe to Unlock Lite <= 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL Injection
Author WIP Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
GoodBarber <= 1.0.26 - Open Redirect
Conditional Shipping for WooCommerce <= 3.4.0 - Cross-Site Request Forgery
ActiveDEMAND <= 0.2.46 - Missing Authorization
Slazzer Background Changer <= 3.14 - Missing Authorization
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.