Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass
Wonder Slider Lite <= 13.9 - Reflected Cross-Site Scripting via 'page'
WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request
Elementor Addon Elements <= 1.12.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Prime Slider – Addons For Elementor <= 3.11.10 - Incorrect Authorization via bdt_duplicate_as_draft
Themify Builder <= 7.0.5 - Cross-Site Request Forgery
WP Club Manager – WordPress Sports Club Plugin <= 2.2.10 - Missing Authorization to Unauthenticated Event Permalink Update
Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update
Shariff Wrapper <= 4.6.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Apollo13 Framework Extensions <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP SMS <= 6.5.2 - Reflected Cross-Site Scripting via 'page'
CP Polls <= 1.0.71 - Unauthenticated Poll Limit Bypass
Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Labels For Woocommerce <= 1.5.3 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Coupon Referral Program <= 1.8.3 - Unauthenticated PHP Object Injection
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion
Woocommerce Vietnam Checkout <= 2.0.7 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Yarn untrusted search path vulnerability
.NET Information Disclosure Vulnerability
Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images
Local File Inclusion vulnerability in zmarkdown
WP Hotel Booking <= 2.0.9.2 - Improper Authorization on Multiple REST API Routes
PowerShell is subject to remote code execution vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.