Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization
Visual Link Preview <= 2.4.1 - Authenticated (Subscriber+) Information Exposure
Dataverse Integration <= 2.90 - Authenticated (Contributor+) Server-Side Template Injection to Information Exposure
Elementor Website Builder – more than just a page builder <= 4.1.0 - Missing Authorization
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 - Authenticated (Subscriber+) SQL Injection
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection
WP Time Slots Booking Form <= 1.2.50 - Authenticated (Subscriber+) SQL Injection
Progress Planner <= 1.9.0 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Spring Cloud Function Context has Uncontrolled Recursion
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Claw Orchestrator is missing authentication for the component API Endpoint
Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title'
Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
FPW Category Thumbnails <= 1.9.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'id' Parameter
ZeM STL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
BirdSeed <= 2.2.0 - Cross-Site Request Forgery via BirdSeed Token Change
Word Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Replacement' Parameter
hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter
rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter
rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.