Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Soledad <= 8.4.1 - Reflected Cross-Site Scripting
1 click disable all <= 1.0.1 - Cross-Site Request Forgery
Post Duplicator <= 2.31 - Missing Authorization via mtphr_duplicate_post
Structured Content <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tutor LMS <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Sayfa Sayaç <= 2.6 - Unauthenticated SQL Injection
Smart External Link Click Monitor [Link Log] <= 5.0.2 - Reflected Cross-Site Scripting
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
Astra Pro <= 4.3.1 - Authenticated(Contributor+) Remote Code Execution via Metabox
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
Webflow Pages <= 1.0.8 - Missing Authorization
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
Bold Page Builder <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart External Link Click Monitor [Link Log] <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Soledad <= 8.4.1 - Authenticated (Contributor+) SQL Injection
WP Photo Album Plus <= 8.5.02.005 - Insecure Direct Object Reference
Soledad <= 8.4.1 - Unauthenticated PHP Object Injection
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Email Subscription Popup <= 1.2.18 - Reflected Cross-Site Scripting
Flexible Woocommerce Checkout Field Editor <= 2.0.1 - Missing Authorization
Ultimate Dashboard <= 3.7.10 - Login Page Disclosure on Multi-site
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
WP Photo Album Plus <= 8.5.02.005 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.