Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Survey Maker <= 5.1.6.3 - Unauthenticated Authorization Bypass
Tutor LMS <= 3.4.0 - Authenticated (Subscriber+) HTML Injection
Flo Forms <= 1.0.43 - Missing Authorization
Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Spider Elements – Addons for Elementor <= 1.6.3 - Missing Authorization
Broadstreet <= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Popping Content Light <= 2.4 - Reflected Cross-Site Scripting
Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection
Hive Support <= 1.2.5 - Missing Authorization
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Hive Support <= 1.2.5 - Missing Authorization
WP-Recall <= 16.26.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Advanced Advertising System <= 1.3.1 - Open Redirect
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Asgaros Forum <= 3.0.0 - Authenticated (Subscriber+) Authorization Bypass
Global Gallery <= 8.8.0 - Reflected Cross-Site Scripting
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
5sterrenspecialist <= 1.4 - Reflected Cross-Site Scripting
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) Arbitrary File Upload
WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download
CM Registration and Invitation Codes <= 2.5.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.