Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Video Expander <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Savoy <= 3.0.8 - Unauthenticated Information Exposure
Findgo <= 1.3.57 - Cross-Site Request Forgery
Simple Poll <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
B Blocks <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inspectlet - User Session Recording and Heatmaps <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Rentals <= 3.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simplified <= 1.0.11 - Authenticated (Administrator+) Server-Side Request Forgery
Primer MyData for Woocommerce <= 4.2.5 - Cross-Site Request Forgery
Real Estate Manager Pro <= 12.7.3 - Reflected Cross-Site Scripting
Neon Channel Product Customizer Free <= 2.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Kalium <= 3.18.3 - Cross-Site Request Forgery
Templatera <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
StoryMap <= 2.1 - Cross-Site Request Forgery
DigitalOcean Spaces Sync <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Unicamp <= 2.6.3 - Unauthenticated Local File Inclusion
Modernize <= 3.4.0 - Missing Authorization
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload
CM On Demand Search And Replace <= 1.5.2 - Cross-Site Request Forgery
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization
JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion
Shortcode Redirect <= 1.0.02 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.