Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Pardakht Delkhah <= 3.0.0 - Cross-Site Request Forgery
Tornados <= 2.1 - Unauthenticated Local File Inclusion
Robots.txt rewrite <= 1.6.1 - Cross-Site Request Forgery
Attachments <= 5.2 - Missing Authorization
Orders Chat for WooCommerce <= 2.0.0 - Missing Authorization
Criptopayer for Elementor <= 1.0.1 - Missing Authorization
GS Portfolio for Envato <= 1.4.2 - Missing Authorization
Universal Video Player <= 3.8.4 - Reflected Cross-Site Scripting
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery
Eldon <= 1.0 - Unauthenticated Local File Inclusion
ListingPro Reviews < 2.9.11 - Reflected Cross-Site Scripting
BuddyPress Activity Shortcode <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
EasyTest <= 1.0.1 - Missing Authorization
Consulting <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Featured Image Generator <= 1.3.3 - Missing Authorization
Postie <= 1.9.73 - Authenticated (Contributor+) Stored Cross-Site Scripting
Genemy <= 1.6.6 - Authenticated (Subscriber+) Server-Side Request Forgery
Worker for Elementor <= 1.0.10 - Missing Authorization
RestroPress <= 3.2.7 - Missing Authorization
Direct Payments WP <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Custom Post Status <= 1.1.0 - Cross-Site Request Forgery
Couponer for Elementor <= 1.1.7 - Missing Authorization
Melos <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.