Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersLimit Login Attempts <= 5.5 - Unauthenticated SQL Injeciton
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure
Dollie Hub – Build Your Own WordPress Cloud Platform <= 6.2.0 - Authenticated (Contributor+) Post Disclosure
LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure
Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure
BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter
Product Labels For Woocommerce <= 1.5.8 - Authenticated (Administrator+) SQL Injection
Pinpoint Booking System <= 2.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
WP Mailster <= 1.8.16.0 - Unauthenticated Information Exposure
WP Project Manager <= 2.6.31 - Authenticated (Project Manager+) SQL Injection
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection
Analytify <= 5.4.3 - Missing Authorization
WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection
WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) SQL Injection via orderby
Connexion Logs <= 3.0.2 - Authenticated (Admin+) SQL Injection
NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection
Revy <= 1.18 - Unauthenticated SQL Injection
Watu Quiz <= 3.4.1.2 - Authenticated (Contributor+) SQL Injection
Content Audit Exporter <= 1.1 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.