Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Simple Contact Forms <= 1.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
XV Random Quotes <= 2.0.0 - Unauthenticated SQL Injection
Ethiopian Calendar <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPCargo Track & Trace <= 8.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference
RSVPMarker <= 11.6.7 - Unauthenticated SQL Injection
Appointify <= 1.0.8 - Authenticated (Admin+) Arbitrary File Upload
Cal.com <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP AutoKeyword <= 1.0 - Unauthenticated SQL Injection
CookieHint WP <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Groundhogg <= 3.7.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter
Multi Days Events and Multi Events in One Day Calendar <= 1.1.3 - Cross-Site Request Forgery
History Log by click5 <= 1.0.13 - Unauthenticated SQL Injection
Twice Commerce <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CF7 Spreadsheets <= 2.3.2 - Missing Authorization to Settings Update
Cryptocurrency Widgets Pack <= 2.0.1 - Missing Authorization
IMPress for IDX Broker <= 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Welcome Popup <= 1.0.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
ACME Divi Modules <= 1.3.5 - Missing Authorization
wordpress related Posts with thumbnails <= 3.0.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Themesflat Addons For Elementor <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sliced Invoices <= 3.9.5 - Missing Authorization
Behance Portfolio Manager <= 1.7.5 - Authenticated (Contributor+) SQL Injection
Vitepos <= 3.1.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.