Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cross-Site Scripting in TYPO3 component Indexed Search
TYPO3 is susceptible to Cross-Site Flashing
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
qdrant input validation failure
Silverpeas authentication bypass
MJ Update History <= 1.0.4 - Missing Authorization
Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass
WP-Recall <= 16.26.6 - Cross-Site Request Forgery
Frontend Registration – Contact Form 7 <= 5.1 - Authenticated (Editor+) Privilege Escalation
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
Event Tickets with Ticket Scanner <= 2.3.1 - Reflected Cross-Site Scripting
Checkout Field Editor for WooCommerce (Pro) <= 3.6.2 - Unauthenticated Arbitrary File Deletion
SEOPress <= 7.7.2 - Authenticated (Contributor+) Open Redirect
Insert Post Ads <= 1.3.2 - Missing Authorization
Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes
KiviCare <= 3.6.6 - Authenticated (Patient+) Insecure Direct Object Reference
Tracking Code Manager <= 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Emergency Password Reset <= 8.0 - Cross-Site Request Forgery
MelaPress Login Security <= 1.3.0 - Authenticated (Admin+) Remote File Inclusion
Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization via get_jltma_save_menuitem_settings()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.