Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
JetEngine <= 3.8.13.1 - Unauthenticated Stored Cross-Site Scripting
Content Views <= 4.4 - Authenticated (Subscriber+) SQL Injection
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.2.3 - Unauthenticated Stored Cross-Site Scripting
Download Monitor <= 5.2.5 - Missing Authorization
Maps <= 4.9.6 - Authenticated (Subscriber+) Denial of Service
Simple CAPTCHA with Cloudflare Turnstile <= 1.41.0 - Unauthenticated CAPTCHA Bypass
Solace Extra <= 1.6.0 - Missing Authorization
Maps <= 4.9.6 - Authenticated (Subscriber+) Local File Inclusion
YMC Filter <= 3.12.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Statistics <= 14.16.9 - Authenticated (Subscriber+) Information Exposure
Newsletters <= 4.15 - Unauthenticated API Authorization Bypass via Type Juggling
Cancel Order & Request Woocommerce <= 1.3.4.33 - Missing Authorization
Essential Blocks <= 6.3.0 - Unauthenticated Information Exposure
Google Authenticator <= 0.55 - Cross-Site Request Forgery
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting
BNE Testimonials <= 2.0.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Search Lite <= 4.14.4 - Unauthenticated PHP Object Injection
MStore API <= 4.20.0 - Missing Authorization
Essential Blocks <= 6.3.0 - Unauthenticated Information Exposure
Online Scheduling and Appointment Booking System – Bookly < 27.8 - Unauthenticated SQL Injection
Remote API <= 0.2 - Unauthenticated PHP Object Injection
Photo Album Plus <= 9.2.07.1 - Unauthenticated Export ZIP File Deletion
Events Manager <= 2.2.4 - Insecure Direct Object Reference to Unauthenticated Payment Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.