Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filtersVisitor Traffic Real Time Statistics pro <= 11.10 - Authenticated (Subscriber+) SQL Injection
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.6 - Authenticated (Subscriber+) SQL Injection
Export Import Menus <= 1.9.2 - Unauthenticated Information Exposure
Custom CSS and JavaScript <= 2.0.16 - Unauthenticated Information Exposure
Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure
ProSolution WP Client <= 2.0.8 - Unauthenticated SQL Injection
Term Pages <= 1.0.0 - Unauthenticated SQL Injection
ProSolution WP Client <= 2.0.5 - Unauthenticated SQL Injection
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 10.11.1 - Unauthenticated SQL Injection
HT Contact Form <= 2.9.2 - Unauthenticated Information Exposure
Featured Video Plus <= 2.3.3 - Unauthenticated Information Exposure
Tracking Code Manager <= 2.6.0 - Cross-Site Request Forgery
Participants Database < 2.7.8.4 - Unauthenticated SQL Injection
YITH WooCommerce Zoom Magnifier <= 2.52.0 - Unauthenticated Information Exposure
Library Management System <= 3.6.6 - Authenticated (Subscriber+) SQL Injection
Iptanus File Upload <= 5.1.7 - Unauthenticated SQL Injection
WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection
WP TripAdvisor Review Slider <= 14.3 - Authenticated (Administrator+) SQL Injection
JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter
User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection
Udimi Tools <= 3.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Configuration Reset via 'disconnect' AJAX Action
TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter
Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.