Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersDiza <= 1.3.8 - Unauthenticated Local File Inclusion
Besa <= 2.3.8 - Unauthenticated Local File Inclusion
Hara <= 1.2.10 - Unauthenticated Local File Inclusion
Ruza <= 1.0.7 - Unauthenticated Local File Inclusion
Maia <= 1.1.15 - Unauthenticated Local File Inclusion
Lasa <= 1.1 - Unauthenticated Local File Inclusion
Aora <= 1.3.9 - Unauthenticated Local File Inclusion
DSK < 2.4 - Unauthenticated Local File Inclusion
Evon <= 3.4 - Unauthenticated Local File Inclusion
WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion
Xagio SEO <= 7.1.0.16 - Unauthenticated Stored Cross-Site Scripting via 'HTTP_REFERER'
Spare <= 1.7 - Unauthenticated PHP Object Injection
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload
Photography <= 7.5.2 - Unauthenticated PHP Object Injection
Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload
MapSVG < 8.6.13 - Authenticated (Contributor+) Privilege Esclation
BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
TicketBAI Facturas para WooCommerce <= 3.19 - Unauthenticated SQL Injection
Nitan <= 2.9 - Unauthenticated Local File Inclusion
Grill and Chow <= 1.6 - Unauthenticated Local File Inclusion
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Fitrush <= 1.3.4 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.