Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
PopAd <= 1.0.4 - Authenticated (Admin+) Server-Side Request Forgery
HTACCESS IP Blocker <= 1.0 - Cross-Site Request Forgery
WP Media Categories <= 2.1.0 - Cross-Site Request Forgery
PE Easy Slider <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
HivePress Claim Listings <= 1.1.3 - Missing Authorization
HotelRunner Booking Widget <= 1.6 - Cross-Site Request Forgery
Silencesoft RSS Reader <= 0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ditty <= 3.1.58 - Authenticated (Contributor+) Stored Cross-Site Scripting
aThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
PGS Core <= 5.9.0 - Authenticated (Contributor+) SQL Injection
Netgsm <= 2.9.71 - Missing Authorization
HT Feed <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Subscribe to Download <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
MWW Disclaimer Buttons <= 3.41 - Authenticated (Administrator+) Stored Cross-Site Scripting
Lenix scss compiler <= 1.2 - Cross-Site Request Forgery
Nota Fiscal Eletrônica WooCommerce <= 3.4.0.9 - Missing Authorization
Stackable <= 3.18.1 - Authenticated (Contributor+) Sensitive Information Exposure
The Tribal <= 1.3.3 - Unauthenticated Sensitive Information Exposure
W3SCloud Contact Form 7 to Zoho CRM <= 3.0 - Cross-Site Request Forgery
Map Categories to Pages <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
kontur Admin Style <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
SKT Blocks <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
EmailKit <= 1.6.0 - Missing Authorization to Authenticated (Author+) Arbitrary Content Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.