Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersCreatify <= 1.5 - Unauthenticated PHP Object Injection
Woo Hoo <= 1.25 - Unauthenticated Local File Inclusion
Finag <= 1.5.0 - Unauthenticated PHP Object Injection
Famita <= 1.54 - Unauthenticated Local File Inclusion
Ray Enterprise Translation <= 1.7.1 - Unauthenticated Local File Inclusion
Aromatica <= 1.8 - Unauthenticated Local File Inclusion
Ziston < 1.4.5 - Unauthenticated Local File Inclusion
Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion
Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'
Ninja Forms <= 3.11.0 - Unauthenticated PHP Object Injection
Password Reset with Code <= 0.0.16 - Unauthenticated Privilege Escalation via Weak OTP Codes
Ireca <= 1.8.5 - Unauthenticated Local File Inclusion
Neresa <= 1.3 - Unauthenticated Local File Inclusion
ThemeREX Addons <= 2.36.1.1 - Unauthenticated PHP Object Injection
Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection
AfterShip Tracking <= 1.17.17 - Missing Authorization
Uncanny Automator <= 6.7.0.1 - Missing Authorization
Houzez <= 4.1.1 - Unauthenticated Local File Inclusion
Small Package Quotes – USPS Edition <= 1.3.9 - Authenticated (Administrator+) PHP Object Injection
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download
Cars4Rent <= 1.4.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.