Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download
Drag and Drop File Upload for Elementor Forms <= 1.5.3 - Unauthenticated Arbitrary File Upload
Cars4Rent <= 1.4.2 - Unauthenticated PHP Object Injection
XmasB Quotes <= 1.6.1 - Reflected Cross-Site Scripting
B Slider <= 1.1.30 - Missing Authorization
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
Info Cards <= 1.0.11 - Missing Authorization
Theme Blvd Widget Areas <= 1.3.0 - Reflected Cross-Site Scripting
Blanka - One Page WordPress < 1.5 - Unauthenticated Local File Inclusion
Image Gallery block – Create and display photo gallery/photo album. <= 1.0.7 - Missing Authorization
All Bootstrap Blocks <= 1.3.28 - Missing Authorization
Captcha.eu <= 1.0.60 - Reflected Cross-Site Scripting
Golo <= 1.7.1 - Reflected Cross-Site Scripting
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
Javo Core <= 3.0.0.529 - Unauthenticated Arbitrary Content Deletion
Parallax Section block <= 1.0.9 - Missing Authorization
Chartbeat <= 2.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Yahoo! WebPlayer <= 2.0.6 - Reflected Cross-Site Scripting
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
WooCommerce Payment Gateway for Saferpay <= 0.4.9 - Unauthenticated Path Traversal
Uncode < 2.9.4.4 - Reflected Cross-Site Scripting
request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1
mitmproxy binaries embed a vulnerable python-hyper/h2 dependency
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.