Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Themify Portfolio Post <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Sober <= 3.5.11 - Unauthenticated Information Exposure
Easy Form Builder <= 3.8.20 - Missing Authorization
ThirstyAffiliates <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kerge <= 4.1.3 - Unauthenticated Server-Side Request Forgery
Wilmër < 3.5 - Authenticated (Contributor+) Local File Inclusion
Document Library Lite <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
UseStrict's Calendly Embedder <= 1.1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sitewide Notice WP <= 2.4.1 - Missing Authorization
WCFM Marketplace <= 3.7.3 - Missing Authorization
WCFM – Frontend Manager for WooCommerce <= 6.7.24 - Missing Authorization
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter
WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP
Admin and Site Enhancements (ASE) <= 8.0.8 - Missing Authorization
UsersWP <= 1.2.48 - Cross-Site Request Forgery
Yaad Sarig Payment Gateway For WC <= 2.2.12 - Missing Authorization
Photo Block <= 1.5.1 - Missing Authorization
Semrush Content Toolkit <= 1.1.32 - Cross-Site Request Forgery
Business Directory <= 6.4.19 - Missing Authorization
Pixel Manager for WooCommerce <= 1.51.1 - Unauthenticated Information Exposure
FAPI Member <= 2.2.29 - Unauthenticated Insecure Direct Object Reference
Ninja Tables <= 5.2.3 - Authenticated (Administrator+) SQL Injection
Document Library Lite <= 1.1.7 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.