Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
News Kit Addons For Elementor <= 1.4.2 - Missing Authorization
WP-CORS <= 0.2.2 - Missing Authorization
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
Emerce Core <= 1.8 - Unauthenticated SQL Injection
Bit Form <= 2.21.10 - Authenticated (Administrator+) SQL Injection
Medinik Core <= 1.3.6 - Unauthenticated SQL Injection
Recipe Maker <= 10.2.4 - Missing Authorization
Sendy <= 3.4.2 - Missing Authorization
Electio Core <= 1.4 - Unauthenticated SQL Injection
WPBookit Pro <= 1.6.18 - Missing Authorization
EventPrime <= 4.2.8.0 - Missing Authorization
ModelTheme Framework < 2.0.0 - Missing Authorization
Woodly Core <= 1.4 - Unauthenticated SQL Injection
Revision Manager TMC <= 2.8.22 - Cross-Site Request Forgery
Quiz And Survey Master <= 10.3.1 - Authenticated (Subscriber+) SQL Injection
Nestbyte Core <= 1.2 - Unauthenticated SQL Injection
FormsDB – Save Elementor Forms to Google Sheets & Post Type <= 2.1.3 - Missing Authorization
Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery
UsersWP <= 1.2.53 - Cross-Site Request Forgery
Oyster - Photography WordPress <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Educare <= 1.6.1 - Unauthenticated Stored Cross-Site Scripting
PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
StudioCMS has Authorization Bypass Through User-Controlled Key
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.