Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
Drupal Full Path Disclosure
FeehiCMS BannerForm[img] unrestricted upload
FeehiCMS file upload vulnerability
Powermail TYPO3 extension Broken Access Control in the OutputController
Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Masterstudy LMS Starter <= 1.1.8 - Unauthenticated Sensitive Information Exposure
Hotel Galaxy <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Custom Field Template <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Parabola <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mantra <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
EasyJobs <= 2.4.14 - Reflected Cross-Site Scripting
EU/UK VAT Manager for WooCommerce <= 2.12.14 - Reflected Cross-Site Scripting
Kahuna <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
HelloAsso <= 1.1.10 - Missing Authorization
Filmix <= 1.1 - Reflected Cross-Site Scripting
Tutor LMS Pro <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
Opor Ayam <= 1.8 - Reflected Cross-Site Scripting
Mystique <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Liquido <= 1.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fluida <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.