Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
GamiPress <= 2.5.6 - Missing Authorization to User Points Updates
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value
Shoppable Images Lite <= 1.2.3 - Missing Authorization
Resume Builder <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Shoppable Images <= 1.2.3 - Cross Site Request Forgery
Announce from the Dashboard <= 1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Fancy Comments <= 1.2.10 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Schema - All In One Schema Rich Snippets <= 1.6.5 - Cross-Site Request Forgery in rich_snippet_dashboard
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter
Twitch Player <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WordPress Social Login and Register <= 7.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Code Injection in thorsten/phpmyfaq
Cross-site Scripting in thorsten/phpmyfaq
Command Injection in thorsten/phpmyfaq
Cross-site Scripting in thorsten/phpmyfaq
Regular Expression Denial of Service in simple-markdown
Code Injection in thorsten/phpmyfaq
Uncaught Exception in thorsten/phpmyfaq
Cross-site Scripting in thorsten/phpmyfaq
Cross-site Scripting in thorsten/phpmyfaq
Regular Expression Denial of Service in simple-markdown
Weak Password Requirements in thorsten/phpmyfaq
Void Contact Form 7 Widget For Elementor Page Builder <= 2.1.1 - Cross-Site Request Forgery in void_cf7_opt_in_user_data_track
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.