Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Craftis - Handcraft & Artisan Elementor Template Kit <= 1.2.8 - Unauthenticated Local File Inclusion
CP Contact Form with Paypal <= 1.3.61 - Authenticated (Contributor+) SQL Injection
Invetex <= 2.18 - Unauthenticated Local File Inclusion
G5Plus April <= 6.8 - Missing Authorization
RT-Theme 18 | Extensions <= 2.5 - Unauthenticated Information Exposure
Meals & Wheels <= 1.1.12 - Unauthenticated Local File Inclusion
VW Pet Shop <= 1.4.7 - Missing Authorization
MoneyFlow <= 1.0 - Unauthenticated Local File Inclusion
LMS Elementor Pro <= 1.0.4 - Unauthenticated Privilege Escalation
Green Thumb <= 1.1.12 - Unauthenticated Local File Inclusion
The Tribal <= 1.3.4 - Unauthenticated Information Exposure
N7 | Golf Club Sports & Events <= 2.16.0 - Unauthenticated Local File Inclusion
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
Avventure <= 1.1.12 - Unauthenticated Local File Inclusion
Maxify <= 1.0.16 - Unauthenticated Local File Inclusion
Gridiron <= 1.0.14 - Unauthenticated Local File Inclusion
VW Portfolio <= 1.3.3 - Missing Authorization
Equadio <= 1.1.3 - Unauthenticated Local File Inclusion
Statamic vulnerable to privilege escalation via stored cross-site scripting
Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs
Statamic's missing authorization allows access to email addresses
Statamic Vulnerable to Server-Side Request Forgery via Glide
Multer vulnerable to Denial of Service via incomplete cleanup
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.