Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
OchaHouse <= 2.2.8 - Unauthenticated Local File Inclusion
Brook <= 2.9.0 - Unauthenticated Local File Inclusion
Image Slider Slideshow <= 1.8 - Authenticated (Contributor+) Insecure Direct Object Reference
WPAdverts – Classifieds Plugin <= 2.3.0 - Missing Authorization
X Addons for Elementor <= 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Block Slider <= 2.2.3 - Missing Authorization
ShopMagic <= 4.7.2 - Missing Authorization
Real Estate Pro <= 2.1.4 - Reflected Cross-Site Scripting
Bulk Landing Page Creator for WordPress LPagery <= 2.4.9 - Missing Authorization
Accordion <= 3.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Ninja Tables <= 5.2.4 - Authenticated (Contributor+) SQL Injection
Typify <= 3.0.2 - Unauthenticated Local File Inclusion
Oshine <= 7.2.7 - Unauthenticated Local File Inclusion
Racquet <= 1.12.0 - Unauthenticated Local File Inclusion
Speed Kit <= 2.0.2 - Missing Authorization
Dashboard Welcome for Beaver Builder <= 1.0.8 - Missing Authorization
ListingHub 1.2.6 - Unauthenticated Stored Cross-Site Scripting
MediaPress <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSS Feed Widget <= 3.0.2 - Missing Authorization
FiboSearch <= 1.32.1 - Missing Authorization
GA4WP: Google Analytics for WordPress <= 2.10.0 - Missing Authorization
Re Gallery – Responsive Photo Gallery <= 1.18.9 - Missing Authorization
Rozy - Flower Shop <= 1.2.25 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.