Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
JetBooking <= 4.1.2 - Authenticated (Custom+) Server-Side Request Forgery
Avada Core <= 5.15.6 - Cross-Site Request Forgery
Thrive Quiz Builder <= 10.9.3.0 - Unauthenticated PHP Object Injection
Photography <= 7.7.6 - Missing Authorization
WP Accessibility Helper (WAH) <= 0.6.6 - Cross-Site Request Forgery
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map <= 10.1.05 - Missing Authorization
افزونه پرداخت امن زرینپال برای ووکامرس (ZarinPal for WooCommerce) <= 5.1.0 - Cross-Site Request Forgery
ListingPro Plugin <= 2.9.10 - Missing Authorization
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Unauthenticated Information Exposure
Participants Database <= 2.7.8.4 - Missing Authorization
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.66 - Missing Authorization
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.7 - Missing Authorization
YT Player – Embed and Customize Video Players <= 2.0.9 - Missing Authorization
Really Simple CSV Importer <= 1.3 - Authenticated (Admin+) Arbitrary File Upload
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More <= 2.6.5 - Missing Authorization
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Unauthenticated Information Exposure
Ziina <= 1.2.21 - Missing Authorization
PayU CommercePro Plugin <= 3.8.9 - Missing Authorization
HashThemes Demo Importer <= 1.4.3 - Authenticated (Author+) Stored Cross-Site Scripting
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mailster - Email Newsletter Plugin for WordPress <= 4.1.17 - Authenticated (Editor+) Arbitrary File Upload
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Administrator+) PHP Object Injection
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.2.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.