Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersBooking Manager <= 2.1.20 - Authenticated (Subscriber+) Insecure Direct Object Reference
Easy Hide Login <= 1.6 - Unauthenticated Information Exposure
Forminator Forms <= 1.57.2.0 - Missing Authorization
Subscribe Forms 1.4.1 - 1.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Points and Rewards for WooCommerce <= 2.10.3 - Missing Authorization
Paid Member Subscriptions <= 3.0.0 - Unauthenticated CAPTCHA Bypass
Divi Dash <= 1.0.6 - Unauthenticated IP Spoofing to Protection Bypass
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.69 - Authenticated (Author+) Stored Cross-Site Scripting
JSM Show Post Metadata <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WC Fields Factory <= 4.1.10 - Missing Authorization
MasterStudy LMS <= 3.7.49 - Authenticated (Subscriber+) Insecure Direct Object Reference
Recipe Maker <= 10.8.1 - Authenticated (Subscriber+) Information Exposure
Paymob for WooCommerce <= 4.1.13 - Missing Authorization
Directorist 8.1 - 8.9.4 - Unauthenticated Information Exposure
Real3D Flipbook Lite <= 5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Directorist 3.1.0 - 8.9.4 - Missing Authorization
Zportals <= 6.4.1 - Authenticated (Subscriber+) Information Exposure
GTranslate <= 5.0.0 - Unauthenticated Arbitrary Shortcode Execution
OAuth Server <= 6.3.0 - Authenticated (Subscriber+) Arbitrary User Identity Token Issuance to Privilege Escalation
Real3D Flipbook Lite <= 5.3 - Missing Authorization
Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated Arbitrary User Meta Corruption
Forminator Forms <= 1.57.2.0 - Unauthenticated Poll Vote Limit Bypass
Directorist <= 8.9.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.