Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Pie Register Premium < 3.8.3.3 - Unauthenticated Cross-Site Scripting
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting
WP Mailster <= 1.8.16.0 - Unauthenticated Information Exposure
The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Goodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family'
Simple User Registration <= 5.5 - Missing Authorization to User Deletion
Captivate Sync <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change
WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload
WP Project Manager <= 2.6.31 - Authenticated (Project Manager+) SQL Injection
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection
Analytify <= 5.4.3 - Missing Authorization
Magical Addons For Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Shortcodes <= 1.7.2 - Reflected Cross-Site Scripting
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
PostX <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Z-Downloads <= 1.11.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection
WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) SQL Injection via orderby
Filebird <= 6.3.2 - Missing Authorization
Themesflat Addons For Elementor <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 5.0.8 - Missing Authorization
WP Mailster <= 1.8.16.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.